Vulnerability Reportoliver006/redis_exporter:v1.93.0-alpine

oliver006/redis_exporter:v1.93.0-alpine
digestsha256:93831cd4d5d67687de67c9d5221b14312fea580af8d157583ed9d4459bf2dd70

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
RELIABLE

This image is safe for production use. The pre-calculated threat score falls in the SAFE band, and the trust profile is RELIABLE with digest pinning. The provided stats show 11 exposed findings and 4 post-exploit findings, but exposed_count_ge6 and post_count_ge6 are both 0, with maximum exposed severity 5.1 and maximum post-exploit severity 2.29. The top finding lists are empty, so there are no CVE IDs from INPUT 4 or INPUT 5 to call out. Standard production hygiene such as digest pinning and routine image updates remains appropriate.

Vulnerabilities

Vulnerability Log

15 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-78669MEDIUM5.1
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-97031MEDIUM5.1
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-97032MEDIUM4.02
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-78663LOW3.6
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56857LOW2.8
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-78667LOW2.29
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-56866LOW1.99
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-94439LOW1.99
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-94448LOW1.87
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-85091NONE0
zlib
1.3.2-r0
fixed in 1.3.2-r1
0.4%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.57.0
No fix yet
—
Not Applicable
CVE-2026-78659NONE0
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78660NONE0
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94440NONE0
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-97030NONE0
stdlib
v1.27.1
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.