MAL-2025-149871 Malicious code in zenobia-redis-inquirer-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62577692ad5350d3327022ce9fd34ed152f4a6dc7818c1977c932084039feb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115063

Malicious code in configstore-callback-redis-gemini npm...

EUVD-2025-114592

Malicious code in delphinus-gatsby-halley-redis npm...

MAL-2025-144461 Malicious code in lint-staged-module-redis-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89691332cc57ba458b0a199b96cbc4a71d7e11eb6e09e49948831c472f63dd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142882 Malicious code in geckodriver-redis-proxima-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69763f048926b7967ad891146ec8e1b3a4dbf64f30fd699cbe99dd1ed7521bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113263

Malicious code in gatsby-redis-sirius-halley npm...

EUVD-2025-121366

Malicious code in terser-xanadu-mocha-redis npm...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0676

Updates of 'redis', 'openjdk21', 'Linux-PAM', 'openjdk11', 'runc' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-5.0-0676

Updates of 'Linux-PAM', 'redis', 'openjdk11', 'openjdk21', 'runc' packages of Photon OS have been released...

redis: Lua library commands may lead to integer overflow and potential RCE

An integer overflow present in the Redis Lua scripting engine that allows an authenticated client to submit a specially crafted Lua script for example via EVAL/EVALSHA that can trigger memory corruption and potentially lead to remote code execution within the Redis server process...

Important: Red Hat Security Advisory: redis:7 security update

An update for the redis:7 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Redis: Redis Lua Use-After-Free may lead to remote code execution

A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution RCE within the Redis process...

Redis: Redis: Authenticated users can execute LUA scripts as a different user

A code injection vulnerability in Redis Lua scripting where an authenticated user can craft a Lua script to manipulate objects and potentially execute code in another user’s context...

Redis: Redis is vulnerable to DoS via specially crafted LUA scripts

A vulnerability was found in Redis where an authenticated user to run a crafted Lua script that can read out‑of‑bounds memory or crash the server, leading to information disclosure and denial of service...

Redis: Redis is vulnerable to DoS via specially crafted LUA scripts

A vulnerability was found in Redis where an authenticated user to run a crafted Lua script that can read out‑of‑bounds memory or crash the server, leading to information disclosure and denial of service...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Redis: Redis Lua Use-After-Free may lead to remote code execution

A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution RCE within the Redis process...

Redis: Redis: Authenticated users can execute LUA scripts as a different user

A code injection vulnerability in Redis Lua scripting where an authenticated user can craft a Lua script to manipulate objects and potentially execute code in another user’s context...

redis: Lua library commands may lead to integer overflow and potential RCE

An integer overflow present in the Redis Lua scripting engine that allows an authenticated client to submit a specially crafted Lua script for example via EVAL/EVALSHA that can trigger memory corruption and potentially lead to remote code execution within the Redis server process...

RHEL 9 : redis:7 (RHSA-2025:20955)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20955 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...