Skip to content
OpenAdvisories

Vendor

dragonflydb

8 known vulnerabilities.

Products

dragonfly 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-104192

    DragonflyDB stream RDB deserialization double-free

    Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK with a consumer group's global PEL and a consumer-local PEL, then free the shared …

    dragonflydb dragonfly
  • Critical 9.4
    CVE-2025-52935

    Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly

    Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly (src/redis/lua/struct modules). This vulnerability is associated with program files lua_struct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18.

    dragonflydb dragonfly