Vulnerability Reporttelegraf:1.39.3-alpine

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The findings are all denial-of-service flaws rated at most 6.0, and none are known to be actively exploited. Most depend on optional listeners such as HTTP/2 or TLS endpoints that Telegraf only exposes when they are configured, so in a default setup the practical risk is limited to slowed metric intake or a crash under heavy hostile traffic. Note that CVE-2026-78669 only applies if an HTTPS listener is enabled, and CVE-2026-33818 only matters when certificate or TLS-style data is exposed. Keeping those listeners disabled where they are not needed, and updating the Go and x/net packages in a future rebuild, will reduce exposure further.