[Security] CVE-2025-49844: Use-After-Free in Lua parser (luaY_parser)

[vulgraph]

Vulnerability

KeyDB inherits CVE-2025-49844 from Redis — Use-After-Free in Lua parser (luaY_parser).

• CVE: CVE-2025-49844
• Severity: CRITICAL

Verification

The upstream fix for this CVE has not been cherry-picked into KeyDB. Verified by checking KeyDB latest master (git sha 603ebb27) — fix commit absent, vulnerable code path present.

Suggested Fix

redis/redis@d5728cb