Vulnerability Reportprom/node-exporter:v1.9.0

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The primary concern is CVE-2025-68121, a medium-severity issue in crypto/tls that could allow authentication bypass during TLS session resumption if the server uses non-default TLS configuration. However, node_exporter typically does not enable TLS by default, and the vulnerability requires specific mutations to the TLS Config, which lowers the practical risk. All 18 post-exploit vulnerabilities are low severity and pose minimal threat. Patching the image to the latest version would eliminate the medium-severity finding.