[Snyk] Security upgrade python from 3.9-slim to 3.14.0rc1-slim

[gitafolabi]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• voting-app/vote/Dockerfile

We recommend upgrading to python:3.14.0rc1-slim, as this image has only 43 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Heap-based Buffer Overflow SNYK-DEBIAN12-GNUTLS28-10690985
	Double Free SNYK-DEBIAN12-GNUTLS28-10690987
	NULL Pointer Dereference SNYK-DEBIAN12-GNUTLS28-10690990
	Improper Certificate Validation SNYK-DEBIAN12-GNUTLS28-10690993
	Integer Overflow or Wraparound SNYK-DEBIAN12-ZLIB-6008963

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Double Free
🦉 NULL Pointer Dereference

[dryrunsecurity]

This pull request uses a pre-release Python Docker image (3.14.0rc1-slim) which may contain unpatched security vulnerabilities and is not recommended for production environments due to potential stability and security risks.

Use of Pre-Release Software in voting-app/vote/Dockerfile

Vulnerability

Use of Pre-Release Software

Description

The Dockerfile uses python:3.14.0rc1-slim as its base image. Release Candidate (RC) versions are not stable and may contain unpatched security vulnerabilities or stability issues that are addressed in the final release. While no direct CVEs were found for 3.14.0rc1, vulnerabilities (CVE-2024-9287, CVE-2024-3220) were identified in the broader Python 3.14.0 release cycle that affect versions prior to the final 3.14.0 release. This indicates that the rc1 version is likely susceptible to these issues. Using pre-release software in production is a security risk as it lacks the stability and security assurances of a final, stable release.

automation/voting-app/vote/Dockerfile

Lines 1 to 5 in a8e8491

	# Using official python runtime base image
	FROM python:3.14.0rc1-slim
	# add curl for healthcheck
	RUN apt-get update \

---

All finding details can be found in the DryRun Security Dashboard.