Vulnerability Reportpypy:3.11-7.3.23-bookworm

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker could exploit CVE-2026-56372 to read out-of-bounds memory from ImageMagick, potentially exposing sensitive data or causing denial of service. If the application does not use ImageMagick, removing the affected packages would fully mitigate this vulnerability. The high number of exposed vulnerabilities (2850 total, 175 critical) demands immediate remediation to avoid inheriting risks into production services. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.