Vulnerability Reportrust:1.95.0-slim

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The top findings are denial-of-service flaws: uncontrolled recursion in glibc (e.g., CVE-2019-9192) and unbounded memory growth in OpenSSL's QUIC handler (CVE-2026-34183), which an attacker could exploit to crash processes or exhaust memory. Although the image is an official Docker image (trust score 100) and post-exploit-only findings are low severity, the exposed surface includes 14 high-severity (≥7) issues with a max of 7.5. Applying the latest package updates for glibc, OpenSSL, and the Linux kernel headers would eliminate these top risks. Note that the OpenSSL issue only applies if QUIC is used, and the glibc issue requires crafted regex patterns, so exposure depends on the workload built on this base. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.