Skip to content
OpenAdvisories
Low · 3.3 CVE-2025-26269 EUVD-2025-12281GHSA-cqc2-rc24-647j

DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua lib…

Published Apr 17, 2025 · Updated Nov 3, 2026 · Assigned by mitre

Description

DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.

Affected products

VendorProductAffectedFixed
DragonflyDB Dragonfly ≤ 1.28.2 —

References