Vulnerability Reportamazoncorretto:25.0.4-alpine

This base/runtime image is a clean foundation for building production images. It does carry 39 lower-severity exposed-surface findings, with a maximum severity of 5.0, and none are known to be actively exploited. Because these findings are low severity and none are flagged as exploited, they do not change the verdict, though images built on it should still keep normal patching practices. The image is an official, digest-pinned build from a trusted publisher, which supports its use as a building block. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.