Vulnerability Reportamazoncorretto:21.0.12-alpine3.24

This base/runtime image is a clean foundation for building production images. One exposed item is present in the stats, but its max severity is 0.0 and there are no exposed findings at severity 6.0 or higher, so it does not change the SAFE verdict. No post-exploit-only findings are reported, and the image is an official Docker Hub image pinned by digest, which supports using it as a building block. Any production images built on top should still follow normal dependency hygiene for layers and packages added later. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.