DragonflyDB vulnerabilities
We track 5 vulnerabilities in DragonflyDB products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
Latest DragonflyDB vulnerabilities
- 7.5 High severity
dragonfly: Memory Allocation with Excessive Size Value
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRANDFIELD, ZRANDMEMBER or SRANDMEMBER. Attackers can send a single command against a one-element
- 9.6 Critical severity
dragonfly: Double Free
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK with a consumer group's global PEL and a consumer-local PEL, then free the shared o
- 8.8 High severity
dragonfly: Integer Overflow or Wraparound
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeof(int64_t) overflows in src/core/cms.cc, allocating an undersized counter buffer
- 7.5 High severity
dragonfly: Out-of-bounds Read
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process (SIGSEGV). Because Dragonfly
- 9.4 Critical severity
dragonfly: Integer Overflow or Wraparound
Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly (src/redis/lua/struct modules). This vulnerability is associated with program files lua_struct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18.