NodeRedis vulnerabilities
We track 2 vulnerabilities in NodeRedis products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest NodeRedis vulnerabilities
- 7.5 High severity
redis-parser: Improper Validation of Specified Quantity in Input
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a c
- 7.5 High severity
redis-parser: Uncontrolled Recursion
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with