EUVD-2026-84192

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-84191

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88406

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-96296

Name of the Vulnerable Software and Affected Versions FalkorDB version 4.20.1 Description An integer overflow occurs in the BulkInsert ReadProperty function within the /bulk insert.c component. This flaw allows an attacker to trigger a Denial of Service DoS by providing a specially crafted input...

PT-2026-96292

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description A stack overflow exists in the GetGroup function located in /ops/op aggregate.c. This issue allows an attacker to cause a Denial of Service DoS, which is a condition where the service becomes...

EUVD-2026-84189

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the DecodeGrBMatrix function /v19/decodematrix.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-84187

Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...

PT-2026-96295

Improper error handling in the GRAPH.EFFECT component /effects/effects apply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...

CVE-2026-88406

FalkorDB (a Redis graph database module), versions v4.20.1 through v4.20.4 , is affected by a stack overflow in the _ValidateUnion_Clauses function located in /ast/ast_validations.c. The flaw allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) by sending a crafted input...

CVE-2026-88408: Stack-based Buffer Overflow

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-96294

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description The graph.UDF function in the Redis module is not registered as a write command, which causes unexpected behavior within the application. Recommendations At the moment, there is no informatio...

CVE-2026-88408

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88411

Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...

CVE-2026-88409

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the DecodeGrBMatrix function /v19/decodematrix.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88406: Stack-based Buffer Overflow

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-6057

FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code execution...

EUVD-2026-21358

FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code execution...

CVE-2026-6057

FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code execution...

CVE-2026-6057 Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution

FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code execution...

CVE-2026-6057 Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution

FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code execution...