Vulnerability Reportinfluxdb:2.8.0-alpine

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The most serious exposure is CVE-2026-111497 in brotli-libs, which is actively exploited and could lead to code execution if a tool in the image decodes attacker-crafted Brotli data, so an attacker could gain control of the container or disrupt the database service. Note: CVE-2026-111497 only matters if a tool in the image actually decodes Brotli input, and CVE-2026-33186 only applies if a custom gRPC allow-by-default authorization policy is configured. The scan also found 281 exposed-surface findings in total, including several standard library flaws reachable through the HTTP API on port 8086 that could degrade availability. Because the image runs as root by default, any successful exploit would carry elevated impact, so the findings should be reviewed and the image rebuilt with patched components before production use.