Vulnerability Reportpython:latest

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker could exploit these to execute arbitrary code, perform cache poisoning, or cause denial of service. Some vulnerabilities, such as CVE-2026-44170, only apply on Windows, and CVE-2019-1010023 requires user interaction. There are no compensating controls within the image to fully mitigate these risks; updating affected packages is necessary. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.