CVE-2025-46819

CVE-2025-46819 affects Redis (versions 8.2.1 and earlier) where an authenticated user can craft a Lua script that reads out-of-bound data or crashes the server, enabling denial of service. The issue is part of a set of Lua-related vulnerabilities (also CVE-2025-46817/46818; and related CVE-2025-4...

AZL-68661 CVE-2025-46817 affecting package compat-lua 5.1.5-17

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...