Not a security issue. Docker explain it very clearly on their documentation. https://docs.docker.com/engine/network/packet-filtering-fire...

If you have opened up a port in your network to the public, the correct assumption is to direct outside connections to your application as per your explicit request.