@@ -1191,7 +1191,7 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
If the deliverable contains or requires an operating system the operating system is expected to be regularly updated and maintained.
Depending on the chosen delivery method, the maintenance of the operating system can be provided by the customer of the product.
> NOTE: A container always has an operating system.
> NOTE: Note that a container hosting the product always has an operating system.
***KEV_EXPLOIT-1** If automateable vulnerability scanners are available the product shall satisfy the following with respect to the most comprehensive of such scanners:
* The product shall have no known exploitable vulnerabilities discovered by scans.
