Vulnerability Reportopenjdk:28-ea-1-jdk-trixie

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker with local access could exploit heap-based buffer overflows (e.g., CVE-2025-11083) to achieve arbitrary code execution within the container. These vulnerabilities require local access, so limiting interactive shell access and enforcing minimal privileges can reduce exposure. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.