netty-codec-redis: Netty: Denial of Service via malicious Redis array header

A flaw was found in Netty, a network application framework. The RedisArrayAggregator component pre-allocates memory based on the declared element count in a Redis array header. A remote attacker can exploit this by sending a small, malicious Redis array header that claims a huge initial capacity,...

netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads

A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending specially crafted Redis payloads across multiple connections without proper termination. This can exhaust the server's direct memory pool, leading to a Denial of Service DoS condition where legitima...

netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by repeatedly closing Redis pipeline connections before a Redis array aggregate completes. This leads to a permanent leak of direct-memory buffers, which prevents memory chunks from being returned to the share...

netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays

A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending a specially crafted Redis payload containing deeply nested arrays. This action forces the server to allocate a large number of state objects and collections, leading to memory exhaustion...

MAL-2026-12020 Malicious code in @keyv/redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bb14bdfcd4aae57a41c9e6e04cd5f612b12e0f45fbcb57510ccb44b095e77 Analysis of @keyv/[email protected] produced no a static rule matches and no traced behavioral findings. The package is a Redis storage adapter for the key...

Malicious code in @keyv/redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bb14bdfcd4aae57a41c9e6e04cd5f612b12e0f45fbcb57510ccb44b095e77 Analysis of @keyv/[email protected] produced no a static rule matches and no traced behavioral findings. The package is a Redis storage adapter for the key...

TencentOS Server 4: redis (TSSA-2026:0773)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0773 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

SUSE CVE-2026-66373

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...

[R1] Stand-alone Security Patch Available for SC Versions 6.6.4, 6.7.5 and 6.8.0 on Tenable Enclave Security: SC202607.2

R1 Stand-alone Security Patch Available for SC Versions 6.6.4, 6.7.5 and 6.8.0 on Tenable Enclave Security: SC202607.2 Jason Schavel Fri, 07/31/2026 - 13:00 Security Center on Tenable Enclave Security leverages third-party software to help provide underlying functionality. Several of the...

Redis < 8.8.0 RCE via RESTORE Double Free (CVE-2026-66373)

The version of Redis installed on the remote host is prior to 8.8.0. It is, therefore, affected by a remote code execution vulnerability. - Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the sam...

CLEANSTART-2026-JE40264 Security fixes in prometheus-redis-exporter 1.84.0-r0

Package prometheus-redis-exporter version 1.84.0-r0 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-BL43584 Security fixes in prometheus-redis-exporter-fips 1.80.0-r0

Package prometheus-redis-exporter-fips version 1.80.0-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-68119, CVE-2025-61728, CVE-2025-68121, CVE-2025-61731...

CLEANSTART-2026-OM19223 Security fixes in redis 6.2.0-r0

Package redis version 6.2.0-r0 fixes 2 vulnerabilities: CVE-2021-21309, CVE-2021-3470...

CLEANSTART-2026-KH08761 Security fixes in prometheus-redis-exporter-fips 1.78.0-r4

Package prometheus-redis-exporter-fips version 1.78.0-r4 fixes 8 vulnerabilities: CVE-2026-27140, CVE-2026-32283, CVE-2026-32280, CVE-2026-32281, CVE-2026-33810...

CLEANSTART-2026-RB64166 Security fixes in redis 8.0.4-r0

Package redis version 8.0.4-r0 fixes 4 vulnerabilities: CVE-2025-49844, CVE-2025-46817, CVE-2025-46818, CVE-2025-46819...

CLEANSTART-2026-MC01423 Security fixes in prometheus-redis-exporter-fips 1.81.0-r0

Package prometheus-redis-exporter-fips version 1.81.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-LG92218 Security fixes in prometheus-redis-exporter-fips 1.80.2-r0

Package prometheus-redis-exporter-fips version 1.80.2-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-IR85053 Security fixes in redis 7.0.12-r0

Package redis version 7.0.12-r0 fixes 2 vulnerabilities: CVE-2022-24834, CVE-2023-36824...

CLEANSTART-2026-BJ04586 Security fixes in prometheus-redis-exporter-fips 1.82.0-r1

Package prometheus-redis-exporter-fips version 1.82.0-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-US24531 Security fixes in prometheus-redis-exporter-fips 1.82.0-r2

Package prometheus-redis-exporter-fips version 1.82.0-r2 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...