Redis has been exposed to vulnerabilities such as CVE-2023-41056, CVE-2023-36824, and CVE-2022-24834. The Cache for Redis has been repaired for the above vulnerabilities. It is recommended that you upgrade to the latest minor version as soon as possible to ensure the safe and stable operation of the instance.

Vulnerability details

CVE-2023-41056

CVE-2023-36824

CVE-2022-24834

Repair suggestions

The Cache for Redis has fixed the above CVE vulnerabilities on the latest minor version of the affected instances. To ensure the safe and stable operation of the instances, it is recommended that you confirm as soon as possible that the minor version of your Redis instance has been updated to the latest minor version.

tip

You can view the database version and minor version information of an instance on the Summary tab. For specific procedure, refer to Viewing instance information.

If the minor version of your Redis instance is not the latest, submit a ticket to contact technical support to upgrade the minor version.

For more update instructions on the minor versions of Proxy and Server, refer to Database minor version upgrade release logs.

Last updated: 2025.10.16 15:08:51

Public security network record in Beijing: No. 11010802032137