Dragonflydb vulnerabilities

Products

• Dragonfly 8

Newest

• dragonflydb dragonfly Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER CVE-2026-111279 8.7 HighOctober 15, 2026
• dragonflydb dragonfly DragonflyDB stream RDB deserialization double-free CVE-2026-104192 9.6 CriticalOctober 13, 2026
• dragonflydb dragonfly DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write CVE-2026-62357 8.8 HighAugust 18, 2026
• dragonflydb dragonfly Dragonfly: RESTORE operations may crash the server CVE-2026-54341 7.5 HighJune 26, 2026
• dragonflydb dragonfly Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer CVE-2026-47206 2.3 LowJune 26, 2026
• dragonflydb dragonfly Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly CVE-2025-52935 9.4 CriticalJune 23, 2025
• dragonflydb dragonfly DragonflyDB Dragonfly through 1.28.2 allows authenticated users to cause a denial of service ... CVE-2025-26269 3.3 LowApril 17, 2025
• dragonflydb dragonfly DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service ... CVE-2025-26268 3.3 LowApril 17, 2025