Vulnerability Reportoliver006/redis_exporter:v1.67.0

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The most notable exposed issues are moderate: CVE-2025-68121 could cause a TLS certificate validation bypass during session resumption if the TLS config is mutated between handshakes, and CVE-2025-61726 could lead to memory exhaustion on HTTP endpoints that parse large URL-encoded forms. These require specific conditions (non-default TLS config mutation or exposed form-parsing endpoint) and do not present direct remote code execution or data exposure in the default exporter role. Post-exploit findings are low severity (max 2.39), so even after a compromise the additional impact is limited. Avoiding TLS config mutation and ensuring no untrusted inputs reach form-parsing endpoints would fully address the two cited issues.