Vulnerability Reportpython:3.15.1

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker who gets a crafted file or data into an application built on this image could leak memory contents, crash processes, or, in the Brotli case, potentially execute code. Note: CVE-2026-42217 only applies if an application opens untrusted EXR image files, and CVE-2026-111497 only applies if an application decodes untrusted Brotli data. The default python3 startup does not reach these libraries, so practical risk depends on what images built on top install and run. The scan reports 2755 exposed findings, but the verdict reflects that most are not reachable in default operation and none are listed as known exploited. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.