Vulnerability Reportruby:3.4.12-alpine

This base/runtime image is a clean foundation for building production images. The scan reports one exposed-surface finding rated low, with a maximum severity of 3.7, and it does not change the verdict because it is not known to be exploited and sits well below concern thresholds. No post-exploitation-only findings were reported, and the image comes from Docker Official with a trusted verdict. Images built on top should still follow standard hardening practices, such as avoiding root as the runtime user, since this image defaults to root. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.