Regular Expression Denial of Serviceredis
redis before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service.
The problem was fixed in commit
2d11b6d and was released in version
Upgrade to version 3.1.1 or later
publishedAdvisory PublishedMay 4th, 2021
reportedReported by AnonymousMay 4th, 2021