As said in another topic:
You can see from details that the three existing tags {‘latest’, ‘8’, ‘8.5’} are for same image.
Furthermore, the image has been generated after the Log4j vulnerability was fixed.
If the earlier ‘8.4’ image was not removed already when 8.5 was available, then surely was at the time current latest was made as it had known, severe vulnarability.
The example in description could probably be updated (about every six months).