Redis vulnerabilities

Products

• Redis 62
• Redis-py 2

Newest

• @langchain redis, langchain-ai langchainjs +1 more LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values CVE-2026-105799 Fix available 2.3 LowOctober 6, 2026
• redis, redis software (enterprise) +1 more Redis TLS pending-data list use-after-free CVE-2026-81934 Fix available 7.5 HighAugust 27, 2026
• redis Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,... CVE-2026-66373 Fix available 7.5 HighJuly 25, 2026
• redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 more redis-server RESTORE invalid memory access may allow remote code execution CVE-2026-25243 Public exploitFix available 7.7 HighMay 5, 2026
• redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 more redis-server Lua use-after-free may allow remote code execution CVE-2026-23631 Public exploitFix available 6.1 MediumMay 5, 2026
• redis, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 more redis-server use-after-free in unblock client flow may allow remote code execution CVE-2026-23479 Public exploitFix available 7.7 HighMay 5, 2026
• redis Redis: Bug in XACKDEL may lead to stack overflow and potential RCE CVE-2025-62507 Public exploitFix available 7.7 HighNovember 2, 2025
• redis, lfprojects valkey +1 more Redis Lua Use-After-Free may lead to remote code execution CVE-2025-49844 Public exploitFix available EPSS 82.6% 10.0 CriticalOctober 3, 2025
• redis Redis is vulnerable to DoS via specially crafted LUA scripts CVE-2025-46819 Public exploitFix available 6.3 MediumOctober 3, 2025
• redis Redis: Authenticated users can execute LUA scripts as a different user CVE-2025-46818 Public exploitFix available 6.0 MediumOctober 3, 2025
• redis Lua library commands may lead to integer overflow and potential RCE CVE-2025-46817 Public exploitFix available 7.0 HighOctober 3, 2025
• redis Redis through 7.4.3 allows memory consumption via a multi-bulk command composed of many bulks,... CVE-2025-46686 Fix availableDisputed 3.5 LowJuly 23, 2025
• redis Redis DoS Vulnerability due to bad connection error handling CVE-2025-48367 Fix available 7.5 HighJuly 7, 2025
• redis Redis allows out of bounds writes in hyperloglog commands leading to RCE CVE-2025-32023 Public exploitFix available 7.0 HighJuly 7, 2025
• redis redis-check-aof may lead to stack overflow and potential RCE CVE-2025-27151 Fix available 4.7 MediumMay 29, 2025
• redis, debian linux, lfprojects valkey +2 more Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client CVE-2025-21605 Fix available 7.5 HighApril 23, 2025
• redis go-redis go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment CVE-2025-29923 Fix available 3.7 LowMarch 20, 2025
• redis Redis allows denial-of-service due to malformed ACL selectors CVE-2024-51741 Fix available 4.4 MediumJanuary 6, 2025
• redis, debian linux +1 more Redis' Lua library commands may lead to remote code execution CVE-2024-46981 Public exploitFix available 7.0 HighJanuary 6, 2025
• redis Lua library commands may lead to stack overflow and RCE in Redis CVE-2024-31449 Public exploitFix available 7.0 HighOctober 7, 2024
• redis Denial-of-service due to unbounded pattern matching in Redis CVE-2024-31228 Fix available 5.5 MediumOctober 7, 2024
• redis Denial-of-service due to malformed ACL selectors in Redis CVE-2024-31227 Fix available 4.4 MediumOctober 7, 2024
• redis redisbloom RedisBloom heap buffer overflow in CF.LOADCHUNK command CVE-2024-25115 7.0 HighApril 9, 2024
• redis redisraft Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the... CVE-2023-31654 9.8 CriticalJanuary 23, 2024
• redis, fedoraproject fedora +1 more Redis vulnerable to integer overflow in certain payloads CVE-2023-41056 Fix available 8.1 HighJanuary 10, 2024
• redis, debian linux, fedoraproject fedora +2 more Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. CVE-2023-45145 Fix available 3.6 LowOctober 18, 2023
• redis Redis SORT_RO may bypass ACL configuration CVE-2023-41053 Fix available 3.3 LowSeptember 6, 2023
• redis Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by... CVE-2021-31294 Fix available 5.9 MediumJuly 15, 2023
• redis, fedoraproject fedora +1 more Heap overflow issue with the Lua cjson library used by Redis CVE-2022-24834 Public exploitFix available EPSS 41.4% 7.0 HighJuly 13, 2023
• redis, fedoraproject fedora +1 more Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis CVE-2023-36824 Fix available EPSS 77.4% 7.4 HighJuly 11, 2023
• redis redis-7.0.10 was discovered to contain a segmentation violation. CVE-2023-31655 Fix available 7.5 HighMay 18, 2023
• redis, debian linux, fedoraproject fedora +2 more `HINCRBYFLOAT` can be used to crash a redis-server process CVE-2023-28856 Fix available 5.5 MediumApril 18, 2023
• redis redis-py redis-py Race Condition due to incomplete fix CVE-2023-28859 Fix available 6.5 MediumMarch 26, 2023
• redis redis-py redis-py Race Condition vulnerability CVE-2023-28858 Fix available 3.7 LowMarch 26, 2023
• redis Specially crafted MSETNX command can lead to denial-of-service CVE-2023-28425 Fix available EPSS 58.5% 5.5 MediumMarch 20, 2023
• redis Integer Overflow in several Redis commands can lead to denial of service. CVE-2023-25155 Fix available 5.5 MediumMarch 2, 2023
• redis Redis string pattern matching can be abused to achieve Denial of Service CVE-2022-36021 Fix available EPSS 59.8% 5.5 MediumMarch 1, 2023
• redis Integer overflow in certain command arguments can drive Redis to OOM panic CVE-2022-35977 Fix available EPSS 14.0% 5.5 MediumJanuary 20, 2023
• redis Integer overflow in multiple Redis commands can lead to denial-of-service CVE-2023-22458 Fix available EPSS 72.0% 5.5 MediumJanuary 20, 2023
• redis Redis on Windows dbghelp.dll uncontrolled search path CVE-2022-3734 Disputed 6.3 MediumOctober 28, 2022
• redis Redis Crash Report debug.c sigsegvHandler denial of service CVE-2022-3647 Fix availableDisputed 3.1 LowOctober 21, 2022
• redis, fedoraproject fedora +1 more Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow CVE-2022-35951 Fix available 7.0 HighSeptember 23, 2022
• redis Potential heap overflow in Redis CVE-2022-31144 Public exploitFix available 7.0 HighJuly 19, 2022
• redis Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. CVE-2022-33105 Fix available 7.5 HighJune 22, 2022
• redis, fedoraproject fedora, netapp management services for element software +2 more +4 more A Malformed Lua script can crash Redis CVE-2022-24736 Fix available 3.3 LowApril 27, 2022
• redis, fedoraproject fedora, netapp management services for element software +2 more +4 more Lua scripts can be manipulated to overcome ACL rules in Redis CVE-2022-24735 Fix available 3.9 LowApril 27, 2022
• debian redis, redis debian-specific redis servers +1 more It was discovered, that redis, a persistent key-value database, due to a packaging issue, is... CVE-2022-0543 In KEVPublic exploitFix available EPSS 99.4% 10.0 CriticalFebruary 18, 2022
• redis, debian linux, fedoraproject fedora +2 more +4 more Integer overflow issue with strings in Redis CVE-2021-41099 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms CVE-2021-32762 Fix available 7.5 HighOctober 4, 2021
• redis, debian linux, fedoraproject fedora +3 more +5 more Integer overflow issue with intsets in Redis CVE-2021-32687 Fix available 7.5 HighOctober 4, 2021
• Show olderLoading…