Vulnerability Reportpython:3.15.1-trixie

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. If an application built on it parses untrusted EXR or Brotli data, an attacker could leak memory contents or corrupt memory, potentially leading to code execution. Note: CVE-2026-42217 only applies if an application decodes untrusted EXR files, and CVE-2026-111497 only applies if an application decompresses untrusted Brotli data. Removing the libopenexr and libbrotli packages from the final image would fully eliminate both CVE-2026-42217 and CVE-2026-111497. None of the top findings are known to be actively exploited, though the broader set of exposed findings still needs to be triaged. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.