Vulnerability Reportamazoncorretto:25.0.4-alpine3.24

This base/runtime image is a clean foundation for building production images. It is an official Docker Official image pinned by digest, which supports a trusted supply-chain baseline. The vulnerability stats show one exposed finding, but its max severity is 0.0 and there are no exposed findings at severity 6.0 or higher, so it does not change the SAFE verdict. There are also no post-exploit-only findings reported. Images built on top inherit this clean baseline, and no CVE-specific remediation is indicated by the provided findings. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.