Vulnerability Reportrust:1.94.1-slim-bookworm

This base/runtime image ships critical vulnerabilities that any image built on it would inherit; they must be remediated before the final image goes to production. An attacker could exploit CVE-2026-42010 to bypass authentication if an RSA-PSK GnuTLS server is deployed, or trigger remote denial of service via CVE-2026-33846's heap overflow in DTLS handshakes. These vulnerabilities are inherited by any image built on this base, so the final image must be updated or patched before production. Note that CVE-2026-42010 requires a non-default RSA-PSK server configuration; the DTLS and glibc issues are more broadly exploitable. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.