Vulnerability Reportoven/bun:1.2.5-alpine

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could potentially execute arbitrary code on the container or cause denial of service by exploiting the OpenSSL CMS parsing vulnerability (CVE-2025-15467), which is particularly concerning given the image's large exposed attack surface. Additional high-severity OpenSSL issues, such as CVE-2026-31789, may also be exploited depending on the platform architecture and configuration. The post-exploit findings are all low severity (max 1.68), so the risk is concentrated in the exposed surface. Upgrading OpenSSL (libcrypto3/libssl3) to a patched version is the primary mitigation; note that CVE-2026-31789 only affects 32-bit systems.