Repository navigation
Security: predis/predis
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Cluster transaction abort leaves MULTI open: a GET on any missing key turns truthy, writes are droppedGHSA-9gpg-4h23-3w4q published
Oct 8, 2026 by tillkrussModerate -
AbstractAggregateConnection::write() Re-Parses Its Buffer on `\r\n`, Enabling Redis Command Injection on Cluster/Replication ConnectionsGHSA-v32q-pmmw-cf38 published
Sep 17, 2026 by tillkrussCritical -
Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connectionsGHSA-w6f5-v2h6-g786 published
Aug 21, 2026 by tillkrussCritical
Learn more about advisories related to predis/predis in the GitHub Advisory Database