What’s Vulnerable › Vulnerabilities

CVE-2026-88382

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-09-24
• Weakness: CWE-770

Description

hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser.

References

• https://github.com/redis/hiredis/issues/1357
• https://github.com/redis/hiredis/issues/1357

Get alerted when CVE-2026-88382 or the next vulnerability affects your stack