Vulnerability Reportpython:3.12-alpine

Name: python:3.12-alpine Security Vulnerability Report
Creator: BaseImage
Keywords: python:3.12-alpine, Docker security, vulnerability scan, CVE, container security, SBOM

python:3.12-alpine

DIGESTsha256:236173eb74001afe2f60862de935b74fcbd00adfca247b2c27051a70a6a39a2d

Executive Summary

SAFE

This image is safe for production use. It is an official Docker Hub image from a trusted publisher, providing a high level of confidence and ensuring immutability through digest pinning. While a few low-severity vulnerabilities were identified, such as CVE-2026-6357 affecting `pip`, these are post-exploit only and do not significantly increase the immediate risk profile. The overall threat score of zero confirms its readiness for production environments.

Threat Score

0/100

SAFE

Official Docker Hub image from a trusted publisher with a perfect reputation score.
Image identity is immutable, pinned by digest for guaranteed consistency.
Zero pre-calculated threat score, indicating very low overall risk.
No critical or high severity vulnerabilities found (maximum severity 3.6).
Only minor post-exploit vulnerabilities detected, such as CVE-2026-6357 for `pip`.

Reputation

TRUSTED

Docker Official

OFFICIAL

Official Docker Hub Image
Pinned by digest (Immutable)

BaseImage/

python:3.12-alpine

Hardened

Grade

A+

Vulns

Verified & secured for production

Vulnerabilities

Vulnerability Log

5 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-34743	LOW3.6	xz-libs 5.8.2-r0 fixed in 5.8.3-r0	<0.1% Theoretical Threat	Directly ExposedContext importance: MEDIUM
CVE-2026-6357	LOW2.96	pip 25.0.1 fixed in 26.1	<0.1% Theoretical Threat	Post-Exploit
CVE-2025-8869	LOW2.7	pip 25.0.1 fixed in 25.3	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-3219	LOW2.55	pip 25.0.1 fixed in 26.1	<0.1% Theoretical Threat	Post-Exploit
CVE-2026-1703	LOW1.99	pip 25.0.1 fixed in 26.0	<0.1% Theoretical Threat	Post-Exploit