Threats affecting pkg:github/falkordb/FalkorDB

An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-88411 is a high-severity vulnerability in FalkorDB (Redis module) version 4.20.1. It involves improper error handling in the GRAPH.EFFECT component, specifically in the effects_apply.c file, which can lead to a Denial of Service (DoS) condition within the application.

The graph.UDF in FalkorDB (Redis module) v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application.

FalkorDB Redis module versions 4.20.1 through 4.20.4 contain a buffer overflow vulnerability in the _Decode_GrB_Matrix function. This flaw can be triggered by crafted input, leading to a denial of service condition. The vulnerability has a high severity rating with a CVSS score of 8.8. No official patch or remediation details are provided in the input data.

FalkorDB Redis module versions 4.20.1 through 4.20.4 contain a stack overflow vulnerability in the _GetGroup() function. This flaw can be triggered by crafted input, leading to a denial of service (DoS) condition. The vulnerability has a medium severity rating with a CVSS score of 6.5. No known exploits are reported in the wild. No official patch or remediation details are provided in the available data.

An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service (DoS) via a crafted input.

FalkorDB (Redis module) versions 4.20.1 through 4.20.4 contain a stack overflow vulnerability in the _ValidateUnion_Clauses function. This flaw can be triggered by crafted input to cause a denial of service (DoS) condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No known exploits are reported in the wild. There is no explicit information about a patch or fix availability.