tocsin

Go/github.com/redis/go-redis/v9 CVE-2025-29923: low 3.7, EPSS 0.75%

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

Action: Upgrade github.com/redis/go-redis/v9 to 9.5.5 or later.

go get github.com/redis/go-redis/v9@v9.7.3
go get github.com/redis/go-redis/v9@v9.6.3
go get github.com/redis/go-redis/v9@v9.5.5

Affected

introducedfixedlast affected
9.7.0-beta.19.7.3-
9.6.0b19.6.3-
9.5.19.5.5-

Fixed versions

9.7.39.6.39.5.5

Sources

CVE-2025-29923 · published · modified · JSON