Is Redis updated to address CVE-2024-31449 in Harbor?

[mf-yeongtae-kim]

Hello Harbor maintainers,

I recently noticed the security vulnerability CVE-2024-31449 in Redis. This vulnerability has the potential to impact Harbor if it relies on an affected version of Redis.

Could you confirm whether the Redis version used in Harbor has been updated to address this issue? If not, are there plans to update Redis to a secure version in an upcoming release?

• Check the Redis version used in the current Harbor deployment.

• Verify whether the Redis version is affected by CVE-2024-31449.

• Redis should be updated to a version that mitigates CVE-2024-31449.

• Redis CVE Details: CVE-2024-31449

If there is already a plan to address this, I’d appreciate any updates or timelines. Thank you for maintaining such an excellent project!