CVE-2026-93435Published
redis-parser through 3.0.0 Denial of Service via Unbounded Recursion
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-93435 · Microsoft / collected KEV context
cve-program · CVE-2026-93435
- https://github.com/redis/ioredis/issues/2108
- https://github.com/NodeRedis/node-redis-parser/issues/66
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L204-L213
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L291-L306
- https://github.com/NodeRedis/node-redis-parser
- https://www.vulncheck.com/advisories/redis-parser-through-3.0.0-denial-of-service-via-unbounded-recursion
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.