← Back

Dragonfly

dragonfly

Vendor: Dragonflydb • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-26269
1Dragonflydb
1Dragonfly
Jun 17, 2026
Apr 17, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.
CVE-2025-26268
1Dragonflydb
1Dragonfly
Jun 17, 2026
Apr 17, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.