Skip to content
OpenAdvisories

Vendor

NodeRedis

3 known vulnerabilities.

Products

redis-parser 2 node-redis 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-97057

    redis-parser through 3.0.0 Denial of Service via Invalid Array Length

    redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a …

    NodeRedis redis-parser
  • High 7.5
    CVE-2026-93435

    redis-parser through 3.0.0 Denial of Service via Unbounded Recursion

    redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with…

    NodeRedis redis-parser