Vulnerability Reportrust:1.94.1-slim

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The image is official and widely used, but the 447 exposed findings with 10 at severity 7.0+ mean that derived services could be crashed by crafted input, e.g., via CVE-2019-9192 in glibc or CVE-2026-34183 in OpenSSL's QUIC handler. Post-exploit issues are low (max 4.5), so the practical impact is availability rather than data compromise. Updating libc6 and openssl to patched releases, and disabling delta CRL processing if unused, would eliminate the most concerning denial-of-service vectors. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.