Vulnerability Reportrust:1.94.0-slim-bookworm

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The most relevant issue is CVE-2026-42013, a GnuTLS flaw that could let a forged certificate be accepted and enable a man-in-the-middle attack, but it only applies when a GnuTLS-based client connects to a malicious server, and the image's TLS clients may not use GnuTLS. The related DTLS flaws in CVE-2026-33846 and CVE-2026-42009 mainly risk service disruption rather than data exposure. Images inheriting this base should confirm whether any TLS workload uses GnuTLS before deciding on a fix, and the exposed-surface findings should be patched in the final image as routine hygiene. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.