Skip to content

[Snyk] Security upgrade python from 3.13-rc-alpine to 3.14-rc-alpine#60

Open
redwan-cse wants to merge 1 commit into
mainfrom
snyk-fix-d6429055061c4d3ffdfc7a347dc24178
Open

[Snyk] Security upgrade python from 3.13-rc-alpine to 3.14-rc-alpine#60
redwan-cse wants to merge 1 commit into
mainfrom
snyk-fix-d6429055061c4d3ffdfc7a347dc24178

Conversation

@redwan-cse

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

  • Dockerfile

We recommend upgrading to python:3.14-rc-alpine, as this image has only 5 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Uncontrolled Recursion
SNYK-ALPINE320-EXPAT-9459842
  614  
high severity Integer Overflow or Wraparound
SNYK-ALPINE320-SQLITE-9712342
  614  
low severity CVE-2024-58251
SNYK-ALPINE320-BUSYBOX-14102403
  436  
low severity CVE-2024-58251
SNYK-ALPINE320-BUSYBOX-14102403
  436  
low severity CVE-2025-46394
SNYK-ALPINE320-BUSYBOX-14102404
  436  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Copilot AI review requested due to automatic review settings December 7, 2025 16:48

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR attempts to upgrade the Python base Docker image from 3.13-rc-alpine to 3.14-rc-alpine to address 4 security vulnerabilities in Alpine Linux packages (expat, sqlite, and busybox). However, there is a critical issue: Python 3.14 has not been released yet as of early 2025, making this upgrade potentially invalid.

Key Changes:

  • Updates Docker base image version in attempt to fix security vulnerabilities
  • Single line change in Dockerfile FROM instruction

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread Dockerfile
@@ -1,5 +1,5 @@
# Use an official Python runtime as a parent image. Safe image 3.10.13-alpine3.17

Copilot AI Dec 7, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The comment mentions "Safe image 3.10.13-alpine3.17" but the actual image being used is now 3.14-rc-alpine. This comment is outdated and misleading.

Consider updating the comment to accurately reflect the current base image version, or remove the specific version reference if it's not being kept up to date.

Suggested change
# Use an official Python runtime as a parent image. Safe image 3.10.13-alpine3.17
# Use an official Python runtime as a parent image.

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants