Skip to content

[Snyk] Security upgrade python from 3.7-slim to 3.14.0rc1-slim#680

Open
ekmixon wants to merge 1 commit into
mkdocsfrom
snyk-fix-831fc13a0e53f084913c943c36673969
Open

[Snyk] Security upgrade python from 3.7-slim to 3.14.0rc1-slim#680
ekmixon wants to merge 1 commit into
mkdocsfrom
snyk-fix-831fc13a0e53f084913c943c36673969

Conversation

@ekmixon
Copy link
Copy Markdown
Owner

@ekmixon ekmixon commented Jul 29, 2025

snyk-top-banner

Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

  • archived/v0.22-docs/serving/samples/hello-world/helloworld-python/Dockerfile

We recommend upgrading to python:3.14.0rc1-slim, as this image has only 43 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Out-of-bounds Write
SNYK-DEBIAN12-GLIBC-5927132
  829  
high severity Out-of-bounds Write
SNYK-DEBIAN12-GLIBC-5927132
  829  
high severity Out-of-bounds Write
SNYK-DEBIAN12-GLIBC-6210098
  721  
high severity Out-of-bounds Write
SNYK-DEBIAN12-GLIBC-6210098
  721  
high severity Allocation of Resources Without Limits or Throttling
SNYK-DEBIAN12-SYSTEMD-6277507
  721  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

@guardrails
Copy link
Copy Markdown

guardrails Bot commented Jul 29, 2025

⚠️ We detected 1 security issue in this pull request:

Insecure Access Control (1)
Severity Details Docs
High Title: Missing User Instruction
📚

More info on how to fix Insecure Access Control in Dockerfile.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@secure-code-warrior-for-github
Copy link
Copy Markdown

Micro-Learning Topic: Insufficient access control (Detected by phrase)

Matched on "Insecure Access Control"

Restrictions on what authenticated users are allowed to do are often not properly enforced. Attackers can exploit these flaws to access unauthorized functionality and/or data, such as access other users' accounts, view sensitive files, modify other users’ data, change access rights, etc. Source: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project

Try a challenge in Secure Code Warrior

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants