Dragonfly Security Vulnerabilities and Issues — Dragonfly CVE List

Lucene search

DragonflydbDragonfly

2 matches found

CVE•added 2025/04/17 6:15 p.m.•55 views

CVE-2025-26269

DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.

5.5CVSS3.9AI score0.00025EPSS

CVE•added 2025/04/17 6:15 p.m.•48 views

CVE-2025-26268

DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.

6.5CVSS3.9AI score0.00039EPSS