[ Vendor · 7 CVEs ]
FalkorDB
CVEs affecting FalkorDB published in the last 30 days, plus any FalkorDB CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107909 | 9 Oct 2026 | CVSS 9.1 | FalkorDBA heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB… | |
| CVE-2026-107910 | 9 Oct 2026 | CVSS 8.1 | FalkorDBAn improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote… | |
| CVE-2026-107911 | 9 Oct 2026 | CVSS 7.5 | FalkorDBA type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated… | |
| CVE-2026-107908 | 9 Oct 2026 | CVSS 9.8 | FalkorDBA heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated… | |
| CVE-2026-7826 | 9 Oct 2026 | CVSS 9.1 | FalkorDBA heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a… | |
| CVE-2026-7827 | 9 Oct 2026 | CVSS 8.1 | FalkorDBA stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in… | |
| CVE-2026-5759 | 9 Oct 2026 | CVSS 9.8 | FalkorDBA double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders… |