CVE-2026-72568 | High | 7.1 | 2026-08-10 | An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by… |
CVE-2026-66373 | High | 7.5 | 2026-07-25 | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same… |
CVE-2026-25243 | High | 8.8 | 2026-05-05 | Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authe… |
CVE-2026-23631 | High | 8.1 | 2026-05-05 | Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchr… |
CVE-2026-23479 | High | 8.8 | 2026-05-05 | Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processComman… |
CVE-2025-62507 | High | 8.8 | 2025-11-04 | Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigg… |
CVE-2025-49844 | Critical | 9.9 | 2025-10-03 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script t… |
CVE-2025-46819 | Medium | 6.3 | 2025-10-03 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script t… |
CVE-2025-46818 | Medium | 6.0 | 2025-10-03 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script t… |
CVE-2025-46817 | High | 7.0 | 2025-10-03 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script t… |
CVE-2025-46686 | Low | 3.5 | 2025-07-23 | Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server al… |
CVE-2025-48367 | High | 7.5 | 2025-07-07 | Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starv… |
CVE-2025-32023 | High | 7.0 | 2025-07-07 | Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a special… |
CVE-2025-27151 | Medium | 4.7 | 2025-05-29 | Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in red… |
CVE-2025-21605 | High | 7.5 | 2025-04-23 | Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimite… |
CVE-2025-29923 | Low | 3.7 | 2025-03-20 | go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order whe… |
CVE-2024-51741 | Medium | 4.4 | 2025-01-06 | Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when… |
CVE-2024-46981 | High | 7.0 | 2025-01-06 | Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage colle… |
CVE-2024-31449 | High | 7.0 | 2024-10-07 | Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overf… |
CVE-2024-31228 | Medium | 5.5 | 2024-10-07 | Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string… |
CVE-2024-31227 | Medium | 4.4 | 2024-10-07 | Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when… |
CVE-2023-31654 | Critical | 9.8 | 2024-01-23 | Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/allo… |
CVE-2023-41056 | High | 8.1 | 2024-01-10 | Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to h… |
CVE-2023-45145 | Low | 3.6 | 2023-10-18 | Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided… |
CVE-2023-41053 | Low | 3.3 | 2023-09-06 | Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing th… |
CVE-2021-31294 | Medium | 5.9 | 2023-07-15 | Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command)… |
CVE-2022-24834 | High | 7.0 | 2023-07-13 | Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and r… |
CVE-2023-36824 | High | 7.4 | 2023-07-11 | Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some ca… |
CVE-2023-31655 | High | 7.5 | 2023-05-18 | redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vector… |
CVE-2023-28856 | Medium | 5.5 | 2023-04-18 | Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that… |
CVE-2023-28859 | Medium | 6.5 | 2023-03-26 | redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data… |
CVE-2023-28858 | Low | 3.7 | 2023-03-26 | redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an un… |
CVE-2023-28425 | Medium | 5.5 | 2023-03-20 | Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to… |
CVE-2023-25155 | Medium | 5.5 | 2023-03-02 | Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can… |
CVE-2022-36021 | Medium | 5.5 | 2023-03-01 | Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a specially crafted pat… |
CVE-2023-22458 | Medium | 5.5 | 2023-01-20 | Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to… |
CVE-2022-35977 | Medium | 5.5 | 2023-01-20 | Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SETRANGE` and `SORT(_RO)` commands can trigger an integer… |
CVE-2022-3734 | Medium | 6.3 | 2022-10-28 | A vulnerability was found in a port or fork of Redis. It has been declared as critical. This vulnerability affects unknown code in the library C:/Program Files… |
CVE-2022-3647 | Low | 3.1 | 2022-10-21 | ** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file… |
CVE-2022-35951 | High | 7.0 | 2022-09-23 | Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an `XAUTOCLAIM`… |
CVE-2022-31144 | High | 7.0 | 2022-07-19 | Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflo… |
CVE-2022-33105 | High | 7.5 | 2022-06-23 | Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID. |
CVE-2022-24736 | Low | 3.3 | 2022-04-27 | Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can caus… |
CVE-2022-24735 | Low | 3.9 | 2022-04-27 | Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior… |
CVE-2022-0543 | Critical | 10.0 | 2022-02-18 | It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could resul… |
CVE-2021-32765 | High | 8.8 | 2021-10-04 | Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously craft… |
CVE-2021-41099 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and… |
CVE-2021-32762 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer over… |
CVE-2021-32687 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap… |
CVE-2021-32675 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory acco… |
CVE-2021-32672 | Medium | 5.3 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger… |
CVE-2021-32628 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be e… |
CVE-2021-32627 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap a… |
CVE-2021-32626 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-bas… |
CVE-2021-32761 | High | 7.5 | 2021-07-21 | Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with… |
CVE-2021-32625 | High | 7.5 | 2021-06-02 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version… |
CVE-2021-29478 | High | 7.5 | 2021-05-04 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 bef… |
CVE-2021-29477 | High | 7.5 | 2021-05-04 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version… |
CVE-2021-21309 | Medium | 5.4 | 2021-02-26 | Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer c… |
CVE-2016-8339 | Critical | 9.8 | 2016-10-28 | A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in… |