Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB

{
                    "vendor": "FalkorDB",
                    "product": "FalkorDB",
                    "collectionURL": "https://github.com/FalkorDB/FalkorDB",
                    "repo": "https://github.com/FalkorDB/FalkorDB",
                    "modules": [
                        "RDB serializer / graph decoder"
                    ],
                    "programFiles": [
                        "src/serializers/decoders/current/v19/decode_graph_entities.c",
                        "src/serializers/decoders/prev/v18/decode_graph_entities.c",
                        "src/serializers/decoders/prev/v17/decode_graph_entities.c"
                    ],
                    "programRoutines": [
                        {
                            "name": "RdbLoadDeletedNodes_v17"
                        },
                        {
                            "name": "RdbLoadDeletedNodes_v18"
                        },
                        {
                            "name": "RdbLoadDeletedNodes_v19"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:falkordb:falkordb:*:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "lessThan": "4.18.1",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                }