CVE-2025-21605

High

Advisory

Published 23 Apr 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 56th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 26; of 17,781 indexed, latest versions
Container images: 26; deployed by those charts
Fix available: 6 of 6; affected packages

Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 26 images.

Affected package	Affected versions	Fixed in	Images
redisbitnami	6.0.8-0, 6.0.12-0, 6.2.7-150, 7.0.8-0+10 more	6.2.18	16
redisdeb	5:5.0.7-2ubuntu0.1, 5:6.0.16-1+deb11u2, 5:6.0.16-1+deb11u4, 5:7.0.15-1~deb12u1+1 more	5:6.0.16-1+deb11u6, 5:7.0.15-1~deb12u4	6
redisapk	6.2.7-r0, 7.0.15-r0	6.2.18-r0, 7.0.15-r3	3
Redis(R)bitnami	7.2.4-5, 7.2.5-0	6.2.18	2
Redis (TM)bitnami	7.2.1, 7.2.4-4	6.2.18	2
redisrpm	6.2.20-2.el9_7	0:7.2.8-1.module+el9.6.0+23049+8374f320	1

OSV records: ALPINE-CVE-2025-21605 BIT-redis-2025-21605 DEBIAN-CVE-2025-21605 RHSA-2025:7429 UBUNTU-CVE-2025-21605 DLA-4162-1
Also known as: BIT-keydb-2025-21605, BIT-valkey-2025-21605, GHSA-r67f-p999-2gff

Charts affected

26 by stars

Chart

Latest

Affected images

Radar Score

difydouban

0.10.0

1 of 6 See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	redis@7.2.4-4 Redis (TM)@7.2.4-4	6.2.18 6.2.18

Open the chart page →

19,391

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	redis@7.0.11-1	6.2.18

Open the chart page →

22,002

chatwootchatwoot

2.0.24

1 of 3 See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	redis@6.2.7-150	6.2.18

Open the chart page →

9,203

codefreshcodefresh-onprem

2.12.13

1 of 42 See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	redis@7.4.3-0	6.2.18

Open the chart page →

14,956

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	redis@6.0.12-0	6.2.18

Open the chart page →

30,326

baserowbaserow-chart

1.0.56

1 of 6 See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	redis@7.2.5-0 Redis(R)@7.2.5-0	6.2.18 6.2.18

Open the chart page →

17,263

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	redis@5:7.0.15-1~deb12u1	5:7.0.15-1~deb12u4

Open the chart page →

17,404

cosmocosmo-platform

0.20.0

1 of 10 See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	redis@7.2.4-5 Redis(R)@7.2.4-5	6.2.18 6.2.18

Open the chart page →

28,839

thingsboard-clusterthingsboard-cluster-betta

0.2.26

1 of 6 See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	redis@7.2.1-0 Redis (TM)@7.2.1	6.2.18 6.2.18

Open the chart page →

14,566

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	redis@7.4.2-1	6.2.18

Open the chart page →

15,863

appwriteappwrite-helm

1.3.2

1 of 8 See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	redis@7.0.10-0	6.2.18

Open the chart page →

9,847

kube-acp-stackcloudentity

2.28.0

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis-cluster :7.4.3-debian-12-r0	a53d023fdfaf	redis@7.4.3-0	6.2.18

Open the chart page →

20,900

supportpalevilgn0me

0.1.6

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	redis@5:5.0.7-2ubuntu0.1	no fix listed

Open the chart page →

20,933

bluesky-pdsijmacd

1.0.0

1 of 2 See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
arunvelsriram/utils :latest	655ad18fd8d6	redis@5:7.0.15-1ubuntu0.24.04.1	no fix listed

Open the chart page →

8,967

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	redis@6.2.20-2.el9_7	0:7.2.8-1.module+el9.6.0+23049+8374f320

Open the chart page →

4,127

mishtip2p-avs

0.1.0

1 of 2 See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
mishtinetwork/operator :latest	bb3fe67a5f7c	redis@5:6.0.16-1+deb11u4	5:6.0.16-1+deb11u6

Open the chart page →

3,999

redispetersandor

15.2.2

1 of 1 See more

redis petersandor 15.2.2

1 of the 1 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnami/redis :7.4.2	4e65bf641805	redis@7.4.2-1	6.2.18

Open the chart page →

2,722

python-apppython-app-chart

0.1.0

1 of 2 See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
mnaggar3396/python-app :latest	371d8ed84b15	redis@5:6.0.16-1+deb11u2	5:6.0.16-1+deb11u6

Open the chart page →

3,382

redisredis

0.1.1

1 of 1 See more

redis redis 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/bitnami/redis :6.0.8.9	e1e9cf5297a6	redis@6.0.8-0	6.2.18

Open the chart page →

1,594

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	redis@7.0.8-1	6.2.18

Open the chart page →

1,906

reload-counterreload-counter

0.1.0

1 of 1 See more

reload-counter reload-counter 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
alaaamin/reload-count-tornado-py-app :v1.0.1alpine	46da5844794e	redis@6.2.7-r0	6.2.18-r0

Open the chart page →

1,009

chainrss3

0.1.28

1 of 8 See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	redis@7.0.15-r0	7.0.15-r3

Open the chart page →

8,528

proxydrss3

0.1.0

1 of 1 See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	redis@7.0.15-r0	7.0.15-r3

Open the chart page →

2,110

sagawisesagawise

0.1.0

1 of 3 See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
venturenox/redis :latest	83b471c193ba	redis@7.4.1-1	6.2.18

Open the chart page →

4,178

redis-high-availabilitysomeblackmagic

1.3.10

1 of 3 See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.8-debian-11-r0	bf01d031ba8c	redis@7.0.8-0	6.2.18

Open the chart page →

3,148

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-21605.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	redis@5:5.0.7-2ubuntu0.1	no fix listed

Open the chart page →

30,687

Container images carrying it

26 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
alaaamin/reload-count-tornado-py-app :v1.0.1alpine	46da5844794e	redis@6.2.7-r0	6.2.18-r0	1
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	redis@6.2.20-2.el9_7	0:7.2.8-1.module+el9.6.0+23049+8374f320	1
arunvelsriram/utils :latest	655ad18fd8d6	redis@5:7.0.15-1ubuntu0.24.04.1	no fix listed	1
baserow/baserow :1.30.1	df0c42eb67e8	redis@5:7.0.15-1~deb12u1	5:7.0.15-1~deb12u4	1
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	redis@7.0.11-1	6.2.18	1
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	redis@7.2.5-0 Redis(R)@7.2.5-0	6.2.18 6.2.18	1
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	redis@7.0.10-0	6.2.18	1
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	redis@7.4.2-1	6.2.18	1
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	redis@7.2.4-5 Redis(R)@7.2.4-5	6.2.18 6.2.18	1
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	redis@6.2.7-150	6.2.18	1
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	redis@7.2.4-4 Redis (TM)@7.2.4-4	6.2.18 6.2.18	1
bitnamilegacy/redis :7.0.8-debian-11-r0	bf01d031ba8c	redis@7.0.8-0	6.2.18	1
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	redis@7.2.1-0 Redis (TM)@7.2.1	6.2.18 6.2.18	1
bitnamilegacy/redis-cluster :7.4.3-debian-12-r0	a53d023fdfaf	redis@7.4.3-0	6.2.18	1
bitnami/redis :7.4.2	4e65bf641805	redis@7.4.2-1	6.2.18	1
mishtinetwork/operator :latest	bb3fe67a5f7c	redis@5:6.0.16-1+deb11u4	5:6.0.16-1+deb11u6	1
mnaggar3396/python-app :latest	371d8ed84b15	redis@5:6.0.16-1+deb11u2	5:6.0.16-1+deb11u6	1
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	redis@6.0.12-0	6.2.18	1
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	redis@7.0.15-r0	7.0.15-r3	1
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	redis@7.0.15-r0	7.0.15-r3	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	redis@5:5.0.7-2ubuntu0.1	no fix listed	1
venturenox/redis :latest	83b471c193ba	redis@7.4.1-1	6.2.18	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	redis@7.0.8-1	6.2.18	1
mcr.microsoft.com/oss/bitnami/redis :6.0.8.9	e1e9cf5297a6	redis@6.0.8-0	6.2.18	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	redis@5:5.0.7-2ubuntu0.1	no fix listed	1
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	redis@7.4.3-0	6.2.18	1