Description
DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DragonflyDB | Dragonfly | < 1.27.0 | 1.27.0 |