Vulnerability Reportrust:1.93.1-slim

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could trigger denial of service by sending crafted CRL or CMS data to applications using OpenSSL, crashing them; the glibc issue CVE-2026-0861 could cause heap corruption under specific alignment conditions. Some findings require non-default flags (e.g., X509_V_FLAG_USE_DELTAS for CVE-2026-28388), so assess your configuration. Post-exploit exposure is low, but the exposed OpenSSL issues should be patched in derived images. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.