Vulnerability Reporteclipse-temurin:21.0.12.1_1-jdk-resolute

This base/runtime image is a clean foundation for building production images. It is an official Docker Hub image pinned by digest, with a TRUSTED reputation and a threat score of 0. The stats show 22 exposed findings and 39 post-exploit-only findings, but none are severity 6.0 or higher; the maximum exposed severity is 5.5 and the maximum post-exploit severity is 3.3. No CVE IDs are listed in the provided exposed-surface or post-exploit-only findings, so there are no specific CVEs to cite. Derived images still inherit these low-severity findings, but they do not alter the SAFE verdict under the supplied inputs. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.