[Snyk] Security upgrade python from 3.6 to 3.14.3

[LowinLi]

Snyk has created this PR to fix 2 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• dockerfile

We recommend upgrading to python:3.14.3, as this image has only 219 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	CVE-2025-27363 SNYK-DEBIAN11-FREETYPE-9402510	829
	CVE-2025-27363 SNYK-DEBIAN11-FREETYPE-9402510	829
	CVE-2025-27363 SNYK-DEBIAN11-FREETYPE-9402510	829
	Out-of-bounds Write SNYK-DEBIAN11-GLIBC-5927133	829
	Out-of-bounds Write SNYK-DEBIAN11-GLIBC-5927133	829

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Out-of-bounds Write

[Copilot]

Pull request overview

This PR updates the project’s Docker base image Python version as part of a Snyk-driven attempt to reduce known vulnerabilities in the container base image.

Changes:

• Update Docker base image from python:3.6 to python:3.14.3.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Upgrading the runtime to Python 3.14.3 is very likely to break the container build/runtime with the currently pinned dependencies (e.g., tensorflow==2.2.1, torch==1.5.0), which do not support such a new Python and typically won’t have wheels available, causing pip install -r requirements-web.txt to fail. Consider either (a) choosing a Python base image version that matches the project’s supported/tested version (CI uses Python 3.8) or (b) updating the requirements (and CI) to dependency versions that explicitly support Python 3.14 before changing the base image.

Suggested change

	FROM python:3.14.3
	FROM python:3.8