tocsin

Go/github.com/redis/go-redis/v9 CVE-2025-29923: low 3.7, EPSS 0.75%

Potential out of order responses when CLIENT SETINFO times out during connection establishment in github.com/redis/go-redis

Action: Upgrade github.com/redis/go-redis/v9 to 9.5.5 or later.

go get github.com/redis/go-redis/v9@v9.5.5
go get github.com/redis/go-redis/v9@v9.6.3
go get github.com/redis/go-redis/v9@v9.7.3

Affected

introducedfixedlast affected
9.5.19.5.5-
09.6.3-
9.7.0-beta.19.7.3-

Fixed versions

9.5.59.6.39.7.3

Sources

CVE-2025-29923 · published · modified · JSON