Vulnerability Reportpython:3.14.8-alpine

This base/runtime image is a clean foundation for building production images. The vulnerability stats do list 2 exposed-surface entries and 5 post-exploit-only entries, but none of the exposed entries reach severity 6.0 and the highest post-exploit severity is 3.17, so the pre-calculated threat score is 0. The image is an official Docker Hub base pinned by digest, which supports using it as a trusted foundation. No CVE IDs were included in the provided top findings, so there are no specific CVE remediations to call out for this verdict. Normal hardening and dependency remediation in derived images remain good practice. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.