Vulnerability Reportoliver006/redis_exporter:v1.80.0

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The primary concern is CVE-2025-68121, which could allow a malicious Redis endpoint to bypass TLS certificate validation during session resumption, but only if the client dynamically changes its CA configuration (e.g., via Config.Clone or GetConfigForClient). In standard deployments without this dynamic mutation, the vulnerability is not applicable. The remaining exposed findings are moderate at most, and post-exploit findings are low severity, so the practical risk is limited. Pinning by digest and a strong community reputation further support a controlled production rollout.