Vulnerability Reporttraefik/whoami:v1.10.3

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The image has 39 exposed vulnerabilities, four of which are medium severity (up to CVSS 6.8). The most notable include a TLS session resumption bypass (CVE-2025-68121) that requires non-default configuration to exploit, and several denial-of-service vectors in URL parsing and HTTP/2 handling (CVE-2025-61726, CVE-2026-33814). Post-exploit vulnerabilities are all low severity (max 2.7). Mitigations: For CVE-2025-68121, ensuring TLS Config is not mutated after cloning eliminates the risk. For the DoS vulnerabilities, rate limiting and input validation can help but are not complete mitigations; updating to a patched Go version is recommended.