Vulnerability Reportvllm/vllm-openai:cu129-nightly-aarch64

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The image contains 2985 vulnerabilities, with 52 critical/high-severity flaws, including CVE-2026-40962 (severity 8.33) in FFmpeg which could lead to remote code execution. Post-exploit vulnerabilities are all low severity (max 4.5) and have minimal practical impact in typical API serving scenarios. To reduce risk, ensure the container is isolated via network policies and that FFmpeg libraries are updated or removed if not required by the workload.