[Snyk] Security upgrade python from 3.13.2-slim to 3.14.0rc1-slim

[simcax]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• docker/Dockerfile

We recommend upgrading to python:3.14.0rc1-slim, as this image has only 43 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Heap-based Buffer Overflow SNYK-DEBIAN12-GNUTLS28-10690985	586
	Double Free SNYK-DEBIAN12-GNUTLS28-10690987	586
	NULL Pointer Dereference SNYK-DEBIAN12-GNUTLS28-10690990	586
	Improper Certificate Validation SNYK-DEBIAN12-GNUTLS28-10690993	586
	CVE-2023-4039 SNYK-DEBIAN12-GCC12-5901316	514

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Double Free
🦉 NULL Pointer Dereference

[Copilot]

Pull Request Overview

This security upgrade fixes Docker base image vulnerabilities by updating Python from version 3.13.2-slim to 3.14.0rc1-slim. Snyk identified 5 medium-severity vulnerabilities in the current base image that will be resolved with this upgrade.

• Updates Python Docker base image to address security vulnerabilities
• Fixes vulnerabilities in GnuTLS and GCC components
• Maintains slim image variant for optimal container size

Comments suppressed due to low confidence (2)

docker/Dockerfile:2

• Python 3.14.0rc1 is a release candidate version that may not be suitable for production use. Release candidates can have stability issues and may not be supported in production environments. Consider using a stable Python version like 3.13.2 or wait for the final 3.14.0 release.

FROM python:3.14.0rc1-slim AS builder

docker/Dockerfile:25

• Python 3.14.0rc1 is a release candidate version that may not be suitable for production use. Release candidates can have stability issues and may not be supported in production environments. Consider using a stable Python version like 3.13.2 or wait for the final 3.14.0 release.

FROM python:3.14.0rc1-slim