Vulnerability Reportredis:8.2.11-alpine

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker who can reach port 6379 could crash the Redis server or run code on the host through memory corruption, exploiting CVE-2026-23479 and CVE-2026-25243, which are reachable in normal operation because the default user has no password and remote clients are accepted. Note: CVE-2026-23631 only applies if the server is configured as a writable replica with Lua scripting enabled, so it is less relevant to a standard standalone deployment. Because the container also runs as root, a successful compromise would have a broader impact on the host environment.