Vulnerability Reportoliver006/redis_exporter:v1.76.0

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The two exposed issues are in the Go stdlib: CVE-2025-68121 is a TLS certificate validation bypass during session resumption, but only applies when CA configurations are mutated between handshakes; CVE-2025-61726 can cause memory exhaustion via excessive query parameters, but requires the exporter to call ParseForm on untrusted input. Both are medium severity and unlikely to be triggered in typical deployments. No high-severity post-exploit findings were reported; the container has 11 post-exploit entries with a maximum severity of 2.39.