1 matches found
WS-2026-0128
RediSearch: the default KNN score field name is built in a stack variable-length array sized from the vector field name, so an FT.SEARCH KNN query on a vector field with a very long name exhausts the stack and crashes the Redis server DoS. Fixed in 2.6.38, 2.8.39, 2.10.33, 8.2.16, 8.4.13 and 8.10...
7.1CVSS6.1AI score
SaveExploits0References2
20