Vulnerability Reportoliver006/redis_exporter:v1.89.0

oliver006/redis_exporter:v1.89.0
digestsha256:fed773ffd2bb2eac706e0ed9cc2fff41651193ee4977e2a4f6919658ad2313f4

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
RELIABLE

This image is safe for production use. Although the supplied stats show 13 exposed findings and 12 post-exploit-only findings, none reach severity 6.0; the maximum exposed severity is 5.1 and the maximum post-exploit-only severity is 2.51. The image also has a RELIABLE trust verdict with a score of 90, popular community usage, and digest pinning for immutability. No CVE IDs were provided in the top findings, so no specific CVE-driven risk can be highlighted from the supplied data. Maintain the digest pin and monitor future image updates, but the current evidence does not justify blocking production deployment.

Vulnerabilities

Vulnerability Log

25 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-33818MEDIUM5.1
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56862MEDIUM5.1
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-78669MEDIUM5.1
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-97032MEDIUM4.02
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56853LOW3.83
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-97031LOW3.83
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-78663LOW3.6
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56857LOW2.8
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-39821LOW2.51
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-56858LOW2.48
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-46600LOW2.29
stdlib
v1.26.5
fixed in 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-56859LOW2.29
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-56860LOW2.29
stdlib
v1.26.5
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-78667LOW2.29
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-56854LOW2.08
golang.org/x/crypto
v0.54.0
fixed in 0.55.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-56866LOW1.99
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-94439LOW1.99
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-94448LOW1.87
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56855LOW1.62
golang.org/x/crypto
v0.54.0
fixed in 0.56.0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-78662LOW1.62
golang.org/x/crypto
v0.54.0
fixed in 0.56.0
0.4%
Theoretical Threat
Post-Exploit
GO-2026-5932NONE0
golang.org/x/crypto
v0.54.0
No fix yet
—
Not Applicable
CVE-2026-78659NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78660NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94440NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-97030NONE0
stdlib
v1.26.5
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.