CVE-2026-84372

Predis , a PHP client for Redis and Valkey, is affected by a critical (CVSS 9.8) Redis command injection and denial of service vulnerability in versions 3.0.0-RC1 through 3.3.0 . The root cause lies in AbstractAggregateConnection::write(), which reparses an already serialized RESP buffer using ex...