dragonflydb has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.6 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.6
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
dragonflydb vulnerabilities
CVEs affecting dragonflydb, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-111279High· 7.5Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRANDFIELD, ZRANDMEMBER or SRANDMEMBER. Attackers can send a single comman…
▾ Twilightdragonflydb · dragonflyvia CVEORG
CVE-2026-104192Critical· 9.6Dragonfly is an in-memory data store built for modern application workloads
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK with a consumer group's global PEL and a consumer-local PEL,…
▾ Midnightdragonflydb · dragonflyvia NVD