Vulnerability Reportregistry:3.1.2

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The main exposure is denial-of-service flaws in the Go HTTP and TLS libraries that the registry runs on port 5000, which can slow or crash the service under a deliberate flood. Several of these only apply when TLS or Encrypted Client Hello is enabled on the listener, so their relevance depends on how the registry is deployed. None of the findings allow code execution, data theft, or authentication bypass, and the image runs as root by default, so updating the affected Go packages in a future rebuild is the practical next step.