6Ağu
Are libc security vulnerabilities in a Python web application actually exploitable in a private cloud environment?
We use a Python web framework and gunicornlibrary on top of Docker to power a web application with a frontend in a private cloud that can be accessed by a private network. Our security tools report many libc vulnerabilities for the Debian-based Python image of the service. As a general rule of thumb, is it safe to ignore typical overflow and such vulnerabilities for the image, or does it depend?
