Predis vulnerabilities
We track 1 vulnerability in Predis products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 1, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Predis vulnerabilities
- 9.8 Critical severity
predis: Improper Neutralization of CRLF Sequences
Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, pipeline handling on aggregate cluster and replication connections reparses an already serialized RESP buffer in AbstractAggregateConnection: