ECR basic scanning now uses version 3 of the Common Vulnerability Scoring System (CVSS) framework