Including mine once the security team sees the CVE warning, even though our image literally never uses curl or libcurl and only ever communicates with other int

Including mine once the security team sees the CVE warning, even though our image literally never uses curl or libcurl and only ever communicates with other internal systems, within our private network. Not that we shouldn't patch it! But unless the nasal demons are going to start a process and make unwanted HTTP connections, I'm not worried.