Vulnerability Reportpython:3.14.10

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most serious finding, CVE-2026-42217 in libopenexr-3-1-30, could let an attacker leak memory contents if an application processes a malicious EXR file. Note: CVE-2026-42217 only applies if an application that opens untrusted EXR image files is present, and the default python3 startup does not parse them. Removing the libopenexr packages from the final image, if no application needs them, would fully eliminate CVE-2026-42217. The scan also found many other lower-severity vulnerabilities, but the highest-rated items here need a specific application context to be exploited. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.