Vulnerability Reportpython:3.11.18-slim-bookworm

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most impactful inherited risks are CVE-2026-11822 in SQLite FTS5, where a crafted database can cause code execution in applications that process untrusted SQLite input, and CVE-2026-78408 in util-linux, which can leak root cgroup migration authority under a specific privileged nsenter operation. An attacker could achieve arbitrary code execution or local privilege escalation in downstream images that expose these libraries to untrusted input or local users. Disabling SQLite's FTS5 extension eliminates CVE-2026-11822, and CVE-2026-78408 only applies when a privileged operator uses nsenter --join-cgroup against an attacker-controlled target. Overall, the image is a reasonable official base, but its inherited package set needs remediation before production use. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.