[Snyk] Security upgrade python from 3.8.7-slim to 3.14.2-slim

[LowinLi]

Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• docker/dockerfile

We recommend upgrading to python:3.14.2-slim, as this image has only 23 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	CVE-2023-26604 SNYK-DEBIAN10-SYSTEMD-3339153	786
	CVE-2023-26604 SNYK-DEBIAN10-SYSTEMD-3339153	786
	Loop with Unreachable Exit Condition ('Infinite Loop') SNYK-DEBIAN10-OPENSSL-2426310	721
	Loop with Unreachable Exit Condition ('Infinite Loop') SNYK-DEBIAN10-OPENSSL-2426310	721
	OS Command Injection SNYK-DEBIAN10-OPENSSL-2807585	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 OS Command Injection

[Copilot]

Pull request overview

This PR attempts to upgrade the Python base image from 3.8.7-slim to 3.14.2-slim to address security vulnerabilities in the Docker container, specifically targeting CVE-2023-26604 in systemd and vulnerabilities in OpenSSL packages.

Key Changes:

• Updates the base Python image from 3.8.7-slim to 3.14.2-slim in both the builder and final stages of the multi-stage Docker build

Critical Issues Identified:

• Python 3.14.2 does not exist; Python 3.14 has not been released as of January 2025
• Major version jump may introduce compatibility issues with existing dependencies

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Upgrading from Python 3.8.7 to a much newer Python version (even if 3.14.2 were valid) represents a major version jump that could introduce breaking changes. The dependencies in docker/requirements.txt include older package versions (e.g., torch==1.10.0, streamlit==1.13.0, transformers==4.22.2) that were designed for Python 3.8. These older packages may not be compatible with newer Python versions.

Before upgrading Python, you should verify that all dependencies are compatible with the target Python version, and consider updating the package versions as needed to ensure compatibility.