Priority HIGH 68
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support.
CVSS 4.0HIGH 7.5· Adjacent network · Low privileges · No interaction · EPSS 0.00479 · Published 2026-08-27 · Fixed in 8.2.9, 8.4.6 +10 CWE-416
Priority HIGH 68
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer,…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2026-07-25 · Fixed in 8.8.0 CWE-415
Priority MEDIUM 42
Redis is an in-memory data structure store.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.04033 · Published 2026-05-05 · Fixed in 8.6.3 CWE-122
Priority LOW 35
Redis is an in-memory data structure store.
CVSS 4.0MEDIUM 6.1· Network · Low privileges · No interaction · EPSS 0.03088 · Published 2026-05-05 · Fixed in 8.6.3 CWE-416
Priority MEDIUM 41
Redis is an in-memory data structure store.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.02612 · Published 2026-05-05 · Fixed in 8.6.3 CWE-416
Priority MEDIUM 46
Redis is an open source, in-memory database that persists on disk.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.07471 · Published 2025-11-04 · Fixed in 8.2.3 CWE-121
Priority HIGH 84
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.82638 · Published 2025-10-03 · Fixed in 8.2.2 CWE-416
Priority LOW 33
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.01086 · Published 2025-10-03 · Fixed in 8.2.2 CWE-190
Priority LOW 35
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00744 · Published 2025-10-03 · Fixed in 8.2.2 CWE-94
Priority MEDIUM 47
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03916 · Published 2025-10-03 · Fixed in 8.2.2 CWE-190
Priority MEDIUM 50
Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user.
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.00319 · Published 2025-07-23 · No fix listed CWE-401
Priority MEDIUM 41
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01191 · Published 2025-07-07 · Partial fix · 8.0.3, 7.4.5 +2 CWE-770
Priority MEDIUM 45
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.06473 · Published 2025-07-07 · Partial fix · 8.0.3, 7.4.5 +2 CWE-680
Priority MEDIUM 44
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01058 · Published 2025-05-29 · Partial fix · 8.0.2 CWE-121
Priority MEDIUM 40
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00872 · Published 2025-04-23 · Partial fix · 7.4.3 CWE-770
Priority LOW 19
go-redis is the official Redis client library for the Go programming language.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00751 · Published 2025-03-20 · Partial fix · 9.7.2, 9.6.3 +2 CWE-20
Priority LOW 20
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00303 · Published 2025-01-06 · Fixed in 7.2.7, 7.4.2 CWE-20
Priority MEDIUM 54
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08182 · Published 2025-01-06 · Partial fix · 7.4.2, 7.2.7 +1 CWE-416
Priority HIGH 73
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04458 · Published 2024-10-07 · Partial fix · 6.2.16, 7.2.6 +1 CWE-121
Priority LOW 31
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01011 · Published 2024-10-07 · Partial fix · 6.2.16, 7.2.6 +1 CWE-674
Priority LOW 21
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00398 · Published 2024-10-07 · Partial fix · 7.2.6, 7.4.1 CWE-20
Priority HIGH 82
Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00631 · Published 2024-01-23 · No fix listed
Priority MEDIUM 42
Redis is an in-memory database that persists on disk.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02561 · Published 2024-01-10 · Partial fix · 7.0.15, 7.2.4 CWE-190
Priority LOW 18
Redis is an in-memory database that persists on disk.
CVSS 3.1LOW 3.6· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2023-10-18 · Partial fix · 6.2.14, 7.0.14 +1 CWE-668
Priority LOW 16
Redis is an in-memory database that persists on disk.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.0029 · Published 2023-09-06 · Partial fix · 7.0.13, 7.2.1 CWE-269
Load more
THREATIST.IORead the docs