CVE-2025-26269
DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library comman...
Original description
The description as published by the source.
DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com
- web gist.github.com