Vulnerability Reportnode:24.22.1-trixie

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The most notable items are CVE-2026-13757 and CVE-2026-18938 in the p11-kit libraries, which could let an attacker exhaust the stack or trigger a memory allocation error during processing, causing crashes or service disruption in any dependent image. Note: CVE-2026-102276 only becomes relevant if the application expands brace patterns taken from untrusted input, so teams that do not process such input face little practical exposure from it. The findings are not reported as exploited in the wild and none reaches high severity, so they do not change the verdict, but they should be addressed in the final image before it reaches production. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.