docker pull python:3.14-alpinepython@sha256:eb2c62658b8d51bff0acc408504b76521d02030de56a8a3c1e830083e89b89d2Size per platform
Compressed download size on Docker Hub for each architecture.
Where the bytes go
Unpacked bytes by directory in the final amd64 filesystem.
Layers
The 4 filesystem layers of the amd64 image, in build order, with each layer's compressed size and the build step that made it.
Full build steps
- 3.9 MB
ADD alpine-minirootfs-3.24.3-x86_64.tar.gz / # buildkit - 412 kB
RUN /bin/sh -c set -eux; apk add --no-cache ca-certificates tzdata ; # buildkit - 14 MB
RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps bluez-dev bzip2-dev dpkg-dev dpkg findutils g++ gcc gdbm-dev gnupg libc-dev libffi-dev libnsl-dev libtirpc-dev linux-headers make ncurses-dev openssl-dev pax-utils readline-dev sqlite-dev tar tcl-dev tk tk-dev util-linux-dev xz xz-dev zlib-dev zstd-dev ; wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; mkdir -p /usr/src/python; tar --extract --dir - 247 B
RUN /bin/sh -c set -eux; for src in idle3 pip3 pydoc3 python3 python3-config; do dst="$(echo "$src" | tr -d 3)"; [ -s "/usr/local/bin/$src" ]; [ ! -e "/usr/local/bin/$dst" ]; ln -svT "$src" "/usr/local/bin/$dst"; done # buildkit
Known vulnerabilities
0Critical0 with a fix
5High5 with a fix
2Medium2 with a fix
1Low1 with a fix
0Unknown0 with a fix
8 findings across 49 packages; 8 have a fixed version upstream, so rebuilding or updating packages clears them. The rest have no fix released yet; distributions often mark these “will not fix” or “deferred” for issues that do not affect the packaged build.
| Severity | Vulnerability | Affected packages | Fixed in |
|---|---|---|---|
| High | CVE-2025-47273setuptools: Path Traversal Vulnerability in setuptools PackageIndex | setuptoolsinstalled 70.3.0 | 78.1.1 |
| High | CVE-2026-114613msgpack: msgpack: Denial of Service via memory leak during map deserialization | msgpackinstalled 1.1.2 | 1.2.3 |
| High | CVE-2026-97687urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override | urllib3installed 2.7.0 | 2.8.0 |
| High | CVE-2026-97689urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser | urllib3installed 2.7.0 | 2.8.0 |
| High | GHSA-6v7p-g79w-8964MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error | msgpackinstalled 1.1.2 | 1.2.1 |
| Medium | CVE-2026-59890setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) | setuptoolsinstalled 70.3.0 | 83.0.0 |
| Medium | CVE-2026-97688urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding | urllib3installed 2.7.0 | 2.8.0 |
| Low | GHSA-xmj3-9gf7-h52wsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description | setuptoolsinstalled 70.3.0 | 84.1.0 |
Packages
- Alpine packages
- 30
- Python packages
- 19
Image configuration
- Base OS
- Alpine Linux 3.24.3
- Default user
- root (no USER set; the entrypoint may still drop privileges)
- Entrypoint
- —
- Command
- python3
- Exposed ports
- none
- Image created
- 2026-10-26
- amd64 digest
- sha256:1acc95d63ef1c8cc902e9a10a8ae080e1377325771d2819beb48156e1b3b9673
Other Python tags
python:3.141,144 MB unpacked · 416 MB downloadC 16H 458M 1497L 1859? 41
python:3.14-slim124 MB unpacked · 44 MB downloadH 49M 62L 62? 1
Platform sizes and layers: Docker Hub API, checked 2026-11-01. Unpacked size, files and SBOM: measured 2026-10-31 from digest sha256:1acc95d63ef1. Vulnerabilities: Trivy re-scan 2026-11-01, database 2026-11-01. Methodology.