EUVD-2025-113688

Malicious code in farout-redis-levels-odin npm...

EUVD-2025-122808

Malicious code in redis-rehype-ursa-apollo npm...

EUVD-2025-122822

Malicious code in redis-fornax-loglevel-scorpius npm...

Malicious code in frontend-proxima-xanthus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170a45435eddbe8938af10061353aa9771fc2daebdae204a5c61d7c5ce5c4ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123112

Malicious code in publish-redis-bellatrix-spectron-webdriver npm...

EUVD-2025-123679

Malicious code in pino-pretty-procyon-redis-prettier npm...

MAL-2025-147137 Malicious code in registry-zenith-redis-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3548f1d4c8fe3a799f8b4223195ae7594aa056e62b63f20ee05bea9627c9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149466 Malicious code in wezen-redis-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bc1e5ca6a049543fd24582fa1c4ba546cf8bd1e58763bb26845e8445f48084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149713 Malicious code in xerxes-pavo-postgres-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d1e32cb7a8eb7a3e3dd6e6082fdd551091e8c76139b2a5bd26959c78e5758b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-yakutsk-hyperion-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ca0e61257cfa29cd62dee33a04665382cd6255381a16018d3b0f297226fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114592

Malicious code in delphinus-gatsby-halley-redis npm...

Critical Photon OS Security Update - PHSA-2025-5.0-0676

Updates of 'redis', 'openjdk11', 'Linux-PAM', 'runc', 'openjdk21' packages of Photon OS have been released...

redis: Lua library commands may lead to integer overflow and potential RCE

An integer overflow present in the Redis Lua scripting engine that allows an authenticated client to submit a specially crafted Lua script for example via EVAL/EVALSHA that can trigger memory corruption and potentially lead to remote code execution within the Redis server process...

Important: Red Hat Security Advisory: redis:7 security update

An update for the redis:7 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Redis: Redis Lua Use-After-Free may lead to remote code execution

A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution RCE within the Redis process...

Redis: Redis is vulnerable to DoS via specially crafted LUA scripts

A vulnerability was found in Redis where an authenticated user to run a crafted Lua script that can read out‑of‑bounds memory or crash the server, leading to information disclosure and denial of service...

Redis: Redis: Authenticated users can execute LUA scripts as a different user

A code injection vulnerability in Redis Lua scripting where an authenticated user can craft a Lua script to manipulate objects and potentially execute code in another user’s context...

Redis: Redis is vulnerable to DoS via specially crafted LUA scripts

A vulnerability was found in Redis where an authenticated user to run a crafted Lua script that can read out‑of‑bounds memory or crash the server, leading to information disclosure and denial of service...

Redis: Redis Lua Use-After-Free may lead to remote code execution

A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution RCE within the Redis process...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...