Vulnerability Reportredis:7.4.12-alpine

redis:7.4.12-alpine3.21redis:7.4.12-alpine
digestsha256:338fbfc036dc5517ac0b04d6de21521085935336e565f223406180e9d84166e2

Executive Summary

Last scanned:

Threat Score
85/100DANGEROUS
Reputation
TRUSTED

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. A remote attacker who reaches port 6379 could corrupt memory and possibly execute code on the Redis server, gaining control over the data it stores and serves. The default configuration has no password and accepts remote clients, so these high-severity flaws are reachable in normal operation, and running as root would widen the damage. Do not deploy this image in any production role; it must be rebuilt on a patched Redis release with authentication enforced and network access restricted.

Vulnerabilities

Vulnerability Log

3 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-23479HIGH8.8
redis
7.4.12
No fix yet
1.7%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2026-25243HIGH8.8
redis
7.4.12
No fix yet
4.0%
Low-Moderate Risk
Directly ExposedContext importance: HIGH
CVE-2026-23631MEDIUM6.48
redis
7.4.12
No fix yet
3.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.