Skip to content
OpenAdvisories

Vendor

dragonflydb

8 known vulnerabilities.

Products

dragonfly 8
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-47206

    Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer

    Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.9, Dragonfly has a RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer. An authenticated user can inject arbitrary RESP messages into the connection's…

    dragonflydb dragonfly
  • Low 3.3
    CVE-2025-26269

    DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon …

    dragonflydb dragonfly
  • Low 3.3
    CVE-2025-26268

    DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafte…

    dragonflydb dragonfly