Vulnerability Reportgolang:1.25.14-alpine

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The main concern is denial-of-service flaws in the Go standard library, such as CVE-2026-78667, which could let an attacker slow down or exhaust resources of a Go service built on this image. These flaws need a Go application that uses specific features, such as file serving or HTTP/2, so they are not exploitable on their own in this shell image. Images that include such services should be patched against the Go toolchain update that addresses these issues before production use. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.