Vulnerability Reportoliver006/redis_exporter:v1.79.0

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The main concern is CVE-2025-61726, a medium-severity memory-exhaustion vulnerability in Go's net/url, which could allow a remote attacker to cause denial of service if the exporter exposes an endpoint that parses query parameters. The metrics path may not parse forms, so actual exploitability is conditional on handler behavior; still, restricting access or applying resource limits would mitigate the risk. The image's trusted provenance and low post-exploitation exposure support a cautious production stance.