Vulnerability Reportgolang:1.27.0-alpine3.23

This base/runtime image is a clean foundation for building production images. It is an official Docker Hub image pinned by digest, so the supply-chain trust signals are strong. Although 34 exposed-surface findings are reported, none reach severity 6.0 and the maximum is 5.9; post-exploit-only findings total 0. Because the threat score is 0 and no high-severity CVE IDs are present in the provided findings, images built on it should still follow normal hardening practices, but this base image does not introduce a material high-severity risk. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.