Vulnerability Reporteclipse-temurin:8-jre

This base/runtime image is a clean foundation for building production images. It does carry 45 exposed-surface findings and 10 post-exploit-only findings, so these vulnerabilities exist, but their maximum severities are low (5.52 and 3.3) and none are known to be actively exploited. Because none of them are high severity or exploited in the wild, they do not drive the verdict. Images built on this base should still apply their own hardening, such as avoiding the default root user. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.