What’s Vulnerable › Products

dragonflydb dragonfly vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your dragonflydb dragonfly version is affected

Latest dragonflydb dragonfly vulnerabilities

• CVE-2026-111279 — Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER (CVSS 7.5)
• CVE-2026-104192 — DragonflyDB stream RDB deserialization double-free (CVSS 9.6)
• CVE-2026-62357 — DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write (CVSS 8.8)
• CVE-2026-54341 — Dragonfly: RESTORE operations may crash the server (CVSS 7.5)
• CVE-2026-47206 — Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer (CVSS 2.3)
• CVE-2025-26269 — (CVSS 5.5)
• CVE-2025-26268 — (CVSS 6.5)