[Python] Unable to install or upgrade to specific version of expat in python docker image

Due to some vulnerabilities in expat such as: https://security.snyk.io/vuln/SNYK-DEBIAN12-EXPAT-7855502, I am trying to upgrade expat to latest version.

I am using the python:3.10-slim image and using SNYK to scan any vulnerabilities present.

Snyk raised that this vulnerability was:

• Introduced through: python@3.10-slim › expat/libexpat1@2.5.0-1
• Fix: Upgrade to expat/libexpat1@2.5.0-1+deb12u1

Part of my Dockerfile looks something like this:

FROM python:3.10-slim AS base

RUN apt-get update \
&& apt-get upgrade -y \
&& apt-get clean


I have tried adding

&& apt-get install -y expat \


or have tried

RUN apk add --upgrade expat


but the version is still the expat/libexpat1@2.5.0-1

Continue reading...