Vulnerability Reportamazonlinux:2

This base/runtime image is a clean foundation for building production images. It contains one low-severity post-exploit vulnerability (max CVSS 2.78), but that only matters if an attacker has already compromised the container and has local access. The image is official, pinned by digest, and carries no exploitable surface vulnerabilities. It is a safe choice for downstream builds. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.