Skip to content
Threat Feed
Subscribe

Product

Redis-Parser (<= 3.0.0)

1 brief RSS
low advisory

Denial of Service Vulnerability in redis-parser via RESP Recursion

The redis-parser library up to version 3.0.0 is vulnerable to a denial of service attack where crafted RESP byte streams trigger unbounded recursion, exhausting the V8 call stack and crashing the host Node.js process.

redis-parser denial-of-service vulnerability supply-chain
1c