Image reports › python
python — vulnerabilities, FIPS 140-3 and fixes
docker.io/library/python · Debian GNU/Linux 13 (trixie)
Latest: python:3.12-slim · checked 2026-09-26
Not FIPS-ready
No. python:3.12-slim relies on cryptography that isn't FIPS-certified, so it can't be used where FIPS 140-3 is required as it stands.
Security: Grade A: 32 known vulnerabilities
32 known vulnerabilities in 21 packages; 6 can be fixed by upgrading 1 package. Start with pip: upgrade 25.0.1 → 26.2 (fixes 6).
Fix plan for 3.12-slim
| Package | Installed | Upgrade to | Fixes |
|---|---|---|---|
| pip | 25.0.1 | 26.2 | 6 |
All checked tags
| Tag | FIPS | Known vulnerabilities | Checked | |
|---|---|---|---|---|
| 3.12-slim | Not FIPS-ready | A 32 | 2026-09-26 | Full report |