MAL-2025-20973 Malicious code in frontend-redis-orogeny-karma (npm)

The package frontend-redis-orogeny-karma was found to contain malicious code...

Malicious code in frontend-redis-orogeny-karma (npm)

The package frontend-redis-orogeny-karma was found to contain malicious code...

MAL-2025-19714 Malicious code in epimetheus-chromedriver-redis-asthenosphere (npm)

The package epimetheus-chromedriver-redis-asthenosphere was found to contain malicious code...

MAL-2025-31939 Malicious code in redis-webpack-bunyan-bellatrix (npm)

The package redis-webpack-bunyan-bellatrix was found to contain malicious code...

MAL-2025-31936 Malicious code in redis-mantle-andromeda-lint-staged (npm)

The package redis-mantle-andromeda-lint-staged was found to contain malicious code...

MAL-2025-26210 Malicious code in mesosphere-protoplanetarydisk-redis-colors (npm)

The package mesosphere-protoplanetarydisk-redis-colors was found to contain malicious code...

MAL-2025-37821 Malicious code in uninstall-redis-wormhole-quantumfoam (npm)

The package uninstall-redis-wormhole-quantumfoam was found to contain malicious code...

Malicious code in redis-chromedriver-typeorm-magellan (npm)

The package redis-chromedriver-typeorm-magellan was found to contain malicious code...

Malicious code in custom-redis (npm)

The package custom-redis was found to contain malicious code...

CVE-2025-54472

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

CVE-2025-54472 Apache bRPC: Redis Parser Remote Denial of Service

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

CVE-2025-54472

CVE-2025-54472 affects Apache bRPC’s Redis protocol parser. The root cause is unbounded memory allocation when parsing Redis protocol data, where arrays/strings are allocated based on network-provided integers; if a value is too large, a bad_alloc can crash the service. The issue also affects 1.1...

CVE-2025-54472 Apache bRPC: Redis Parser Remote Denial of Service

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

CVE-2025-54472 Apache bRPC: Redis Parser Remote Denial of Service

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

Apache bRPC 安全漏洞

Apache bRPC is the United States Apache Apache Foundation's industrial-grade RPC framework for building reliable and high-performance services. A denial of service vulnerability exists in Apache bRPC, which stems from improper memory allocation in the Redis protocol parser, and can be exploited b...

Linux Distros Unpatched Vulnerability : CVE-2025-27151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in...

PT-2025-32668

Name of the Vulnerable Software and Affected Versions: Apache bRPC versions prior to 1.14.1 Description: A flaw in the Redis parser within Apache bRPC allows unauthenticated remote attackers to crash services by triggering unlimited memory allocation. This issue affects the service via network...

Linux Distros Unpatched Vulnerability : CVE-2022-24834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and...

Linux Distros Unpatched Vulnerability : CVE-2025-46686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server...

Linux Distros Unpatched Vulnerability : CVE-2021-32762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer...