en
NodeRedis is an open-source JavaScript and Node.js community focused on Redis client software and Redis protocol parsing. Its projects provide libraries for applications that connect to Redis and process protocol data, serving developers and organizations through public repositories and package distribution.
As of 10/18/2026, NodeRedis recorded 2 security vulnerabilities in the last 90 days across 1 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, redis-parser had the most security vulnerabilities in the NodeRedis ecosystem, with 2 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-97057redis-parser through 3.0.0 Denial of Service via Invalid Array LengthCVE-2026-93435redis-parser through 3.0.0 Denial of Service via Unbounded RecursionCVE-2021-29469Potential exponential regex in monitor mode| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-97057redis-parser through 3.0.0 Denial of Service via Invalid Array Length | Exploitation statusNot exploited | FixYes | Affected productredis-parser | Published09/24/2026 | SeverityHigh |
CVE-2026-93435redis-parser through 3.0.0 Denial of Service via Unbounded Recursion | Exploitation statusNot exploited | FixYes | Affected productredis-parser | Published | |
CVE-2021-29469Potential exponential regex in monitor mode | Exploitation statusNot confirmed | FixYes | Affected productnode-redis | Published04/23/2021 |
3 Results | Page 1 of 1
| SeverityHigh |
| SeverityMedium |