Open Internet by MindsNetCVE Spike after EKS node upgrade? How to separate host-level from image-level vulnerabilities in Trivy