Vulnerability Reporteclipse-temurin:17.0.20.1_1-jre-noble

This base/runtime image is a clean foundation for building production images. The provided stats show 11 exposed vulnerabilities and 36 post-exploit-only vulnerabilities, but none reach severity 6.0 or higher; the maximum exposed severity is 4.67 and the maximum post-exploit severity is 2.8. No top exposed-surface or post-exploit findings were supplied, so there are no specific CVE IDs to call out from INPUT 4 or INPUT 5. Images built on this digest inherit only that low-severity surface under the provided inputs, and normal final-image scanning should still be applied before release. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.