Vulnerability Reportpython:latest

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit crafted GD or ELF files to achieve code execution or denial of service. For example, CVE-2009-3546 and CVE-2019-1010023 have high severity scores (9.3 and 8.8 respectively). Many of these require user interaction, so restricting actions like running ldd on untrusted binaries or processing untrusted image files can mitigate the most serious risks. The post-exploit-only findings are milder, with nothing above 4.64, reducing the impact of a successful initial compromise. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.