Beveiligingsadvies

CVE-2026-47206

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-26 16:39:27

Laatst bijgewerkt 2026-06-26 17:31:48

Toegewezen door GitHub_M

CVSS-score 2.3

Status PUBLISHED

Beschrijving

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.9, Dragonfly has a RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer. An authenticated user can inject arbitrary RESP messages into the connection's response stream, potentially causing response desynchronization in connection-pool clients. This vulnerability is fixed in 1.39.9.

← Alle CVE's bekijken Bekijk op cve.org ↗