Vulnerability Reportrust:1.94.0-alpine

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The only exposed surface finding that stands out is CVE-2026-34182, a medium-severity vulnerability in libssl3 that may allow an on-path attacker to forge CMS messages or gain key-equivalent access. The remaining exposed and post-exploit findings are all low severity, with a maximum exposed score of 6.29 and a maximum post-exploit score of 3.0. Overall, this is a manageable risk for a base image, provided downstream images are built with the necessary security updates. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.