Advisories · Technology
FalkorDB.
Every CVE that names FalkorDB among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument
- FalkorDB
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling
- FalkorDB
- Authentication bypass
- CVSS 8.8 High
Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length
- FalkorDB
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message
- FalkorDB
- Memory corruption
- CVSS 8.8 High
Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB
- FalkorDB
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB
- FalkorDB
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB
- FalkorDB
- Memory corruption