DragonflyDB Dragonfly

• CVE-2026-111279 High 7.5 Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER 0.6%
• CVE-2026-104192 Critical 9.6 DragonflyDB stream RDB deserialization double-free 0.3%
• CVE-2026-62357 High 8.8 DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write 0.5%
• CVE-2026-54341 High 7.5 Dragonfly: RESTORE operations may crash the server 0.5%
• CVE-2026-47206 Low 2.3 Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer 0.4%
• CVE-2025-52935 Critical 9.4 Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly 0.4%
• CVE-2025-26268 Low 3.3 DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked. 0.4%
• CVE-2025-26269 Low 3.3 DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer. 0.3%