oliver006/redis_exporter

There's a security vulnerability in latest versions - CVE-2024-24786

panush opened this issue · 3 comments

panush commented

Describe the problem
I scanned my redis-exporter image (using 1.55.0) and found out this CVE (CVE-2024-24786).
When moving to 1.58.0 (latest version), this CVE still there.

What version of redis_exporter are you running?
oliver006/redis_exporter:v1.58.0-alpine

image

EricIO commented

Seems like it is fixed in 1f5f4c9 but a new release would need to be cut.

oliver006 commented

Thanks for raising the issue - I'll cut a new release in the next few days.

  • ❤️1