Vulnerability Reporteclipse-temurin:21.0.12.1_1-jdk

This base/runtime image is a clean foundation for building production images. It is an official Docker Hub image pinned by digest, and the pre-calculated threat score is 0, which falls in the SAFE band. The supplied stats still show 20 exposed findings and 42 post-exploit-only findings, but none reach severity 6.0; exposed max severity is 5.5 and post-exploit max severity is 3.3. No top exposed-surface or post-exploit CVE details were provided, so there are no specific CVE-level exploit paths to cite. Images built on this base inherit only these lower-severity findings, which do not warrant remediation before production under the provided inputs. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.