Vulnerability Reportprom/node-exporter:latest

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. Several EXPOSED_SURFACE vulnerabilities, notably CVE-2026-33810 (certificate validation bypass) and CVE-2026-32280 (denial of service), are related to TLS certificate handling in the underlying Go standard library. The practical impact of these findings is highly dependent on whether Node Exporter is configured to use TLS for incoming or outgoing connections, as an attacker could disrupt service or spoof services if TLS is enabled. If TLS is not utilized for external or untrusted communications, the attack surface for these specific vulnerabilities is significantly reduced.