Skip to content
OpenAdvisories
Low · 3.3 CVE-2025-26268 EUVD-2025-14851GHSA-w33v-rv28-x6m6

DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The…

Published Apr 17, 2025 · Updated Apr 17, 2025 · Assigned by mitre

Description

DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.

Affected products

VendorProductAffectedFixed
DragonflyDB Dragonfly < 1.27.0 1.27.0

References