CVE-2021-29469
- Source
- https://cve.org/CVERecord?id=CVE-2021-29469
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29469.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-29469
- Aliases
- Downstream
- Related
- Published
- 2021-04-23T18:15:08.303Z
- Modified
- 2026-02-13T02:18:41.091476Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1.
- References
-
- https://github.com/NodeRedis/node-redis/commit/2d11b6dc9b9774464a91fb4b448bad8bf699629e
- https://github.com/NodeRedis/node-redis/releases/tag/v3.1.1
- https://github.com/NodeRedis/node-redis/security/advisories/GHSA-35q2-47q7-3pc3
- https://security.netapp.com/advisory/ntap-20210611-0010/
- https://github.com/NodeRedis/node-redis/commit/2d11b6dc9b9774464a91fb4b448bad8bf699629e
- https://github.com/NodeRedis/node-redis/security/advisories/GHSA-35q2-47q7-3pc3
Affected packages
Git / github.com/redis/node-redis
Affected ranges
- Type
- GIT
- Repo
- https://github.com/redis/node-redis
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
2.*
2.5.0-1
v.*
v.2.0.0
v.2.0.1
v.2.1.0
v.2.2.0
v.2.2.2
v.2.2.3
v.2.2.4
v.2.2.5
v.2.3.0
v.2.3.1
v.2.4.0
v.2.4.1
v.2.4.2
v.2.5.0
v.2.5.1
v.2.5.2
v.2.5.3
v.2.6.0
v.2.6.0-0
v.2.6.0-1
v.2.6.0-2
v.2.6.1
v.2.6.2
v.2.6.3
v.2.6.4
v.2.6.5
v.2.7.0
v.2.7.1
v.2.8.0
v0.*
v0.10.0
v0.10.1
v0.10.2
v0.10.3
v0.11.0
v0.12.0
v0.12.1
v0.3.5
v0.3.6
v0.3.7
v0.3.9
v0.4.0
v0.4.1
v0.5.0
v0.5.1
v0.5.10
v0.5.11
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.5.6
v0.5.8
v0.5.9
v0.6.0
v0.6.1
v0.6.2
v0.6.5
v0.6.7
v0.7.0
v0.7.1
v0.7.2
v0.8.0
v0.8.1
v0.8.3
v0.8.4
v0.8.5
v0.8.6
v0.9.0
v0.9.1
v0.9.2
v1.*
v1.0.0
v3.*
v3.0.0
v3.0.2
v3.1.0