AWS ECR shows wrong vulnerability

Question

Our docker image (python:3.7-slim-buster + apt pinning with Bullseye for a few packages) has updated packages for which a known vulnerability is fi