EUVD-2026-82533

🗓️ 18 Sep 2026 00:31:10Reported by EUVDType

redis-parser through 3.0.0 DoS via unbounded recursion on nested arrays in RESP parser.

Reporter	Title	Published	Views	Family All 3
CVE	CVE-2026-93435	17 Sep 202622:15	–	cve
Cvelist	CVE-2026-93435 redis-parser through 3.0.0 Denial of Service via Unbounded Recursion	17 Sep 202622:15	–	cvelist
NVD	CVE-2026-93435	17 Sep 202623:18	–	nvd

[
  {
    "enisaIdVendor": [
      {
        "id": "ae60a092-ab2c-39ab-b5bf-952a2cd6fa9b",
        "vendor": {
          "name": "NodeRedis"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8c9f328b-287c-3f57-a210-dcf918277d19",
        "product": {
          "name": "redis-parser",
          "vendor": {
            "name": "NodeRedis"
          }
        },
        "product_version": "0 ≤3.0.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/redis/ioredis/issues/2108
github	www.github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js
github	www.github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js
github	www.github.com/NodeRedis/node-redis-parser
vulncheck	www.vulncheck.com/advisories/redis-parser-through-3.0.0-denial-of-service-via-unbounded-recursion
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-93435

18 Sep 2026 00:31Current

CVSS 48.7

CVSS 3.17.5