Vulnerability Reportredis:7.2.17-alpine3.21

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker who reaches port 6379 could corrupt server memory and run code inside the Redis server, gaining access to and the ability to alter the data it holds. The default configuration has no password and protected mode off, so anyone who reaches the port can exploit these flaws anonymously; setting a password closes that anonymous path. Because the process runs as root by default, a successful compromise would carry broader control over the container. Alpine 3.21 reached end of support on 2026-11-01: the distribution no longer ships security fixes for it. Rebuild on Alpine 3.24 or newer.