Vulnerability Reportpypy:3.11-7.3.23-bookworm

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. It contains 81 high-severity exposed vulnerabilities (CVSS >= 7), including CVE-2023-5841 (heap overflow in OpenEXR) and CVE-2019-1010023 (remote code execution via malicious ELF via ldd). Exploitation could lead to remote code execution, heap corruption, or privilege escalation. While the image is official and trusted, the high number of severe vulnerabilities requires active remediation, such as updating affected packages or removing unused libraries, in downstream images. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.