Vulnerability Reportrust:1.94.0-slim

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could cause denial of service by exploiting OpenSSL flaws in certificate or CMS handling (e.g., CVE-2026-28388), and in uncommon DANE-based authentication setups, arbitrary code execution is possible via CVE-2026-28387. Many of these are only reachable if the final image uses specific OpenSSL features like delta CRL processing, QUIC, or DANE TLSA, so validating the application's TLS configuration reduces the practical risk. Post-exploitation findings are lower severity and do not change the overall caution level. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.