Skip to content

[Security] CVE-2025-46686: Multi-bulk memory consumption DoS #966

@vulgraph

Description

@vulgraph

Vulnerability

KeyDB inherits CVE-2025-46686 from Redis — Multi-bulk memory consumption DoS.

Verification

The upstream fix for this CVE has not been cherry-picked into KeyDB. Verified by checking KeyDB latest master (git sha 603ebb27) — fix commit absent, vulnerable code path present.

Suggested Fix

Upstream Redis fix

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions