Vulnerability Reportparrotsec/core:7.0

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could cause denial of service via BIND (CVE-2025-13878) or bypass certificate validation (CVE-2026-42013) for man-in-the-middle attacks. However, most high-severity vulnerabilities require specific services (e.g., BIND named) to be actively running, and the default container command (/bin/bash) suggests an interactive shell where such services are not auto-started. To reduce risk, restrict network exposure and disable unnecessary services. The image's community origin and lack of verification further contribute to the cautionary verdict.