Skip to content
OpenAdvisories

Package · Packagist

predis/predis

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2026-84372

    Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections

    Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, pipeline handling on aggregate cluster and replication connections reparses an already serialized RESP buffer in AbstractAggregateConnection…

    predis predis predis/predis php-nrk-predis Ubuntu Packagist