SUSE CVE-2026-93435

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...

Uncontrolled Recursion

Overview org.webjars.npm:ioredis is a Redis client for Node.js. Affected versions of this package are vulnerable to Uncontrolled Recursion in the RESP protocol parser in lib/parser.js. An attacker can crash the Node.js client process by sending crafted RESP byte streams with repeated nested array...

CVE-2026-93435

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...

CVE-2026-93435

redis-parser through 3.0.0 contains a denial of service vulnerability in its RESP protocol parser . A malicious Redis endpoint can send crafted RESP byte streams with repeated array headers that trigger unbounded recursion on nested arrays, exhausting the V8 call stack . This produces an uncaught...

CVE-2026-93435: Uncontrolled Recursion

redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust t...