A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.1 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service or execute arbitrary code in the redis-server process by supplying a crafted RDB stream whose deleted-nodes buffer length is not a multiple of sizeof(NodeID). The length check relies on ASSERT(), which is compiled out in release builds, so the function continues after freeing the buffer, reading it and freeing it a second time.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5759.json"
[
{
"deprecated": false,
"digest": {
"function_hash": "309646442241553020961891524163576147997",
"length": 506
},
"id": "CVE-2026-5759-02a8ed31",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/current/v19/decode_graph_entities.c",
"function": "RdbLoadDeletedEdges_v19"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"139524316813422918682205667918643358075",
"234084382731849359446146279790314259169",
"230367688083363810732624848633009952007",
"175514546228578915082288048959643355465",
"279389797493588674403614902431371651615",
"14680976723543448124236161087998961561",
"163660608271201465206362600131037483762",
"191731222119798231259798423616494057527",
"32534469762681316742004060682896940817",
"120387677387760877803716225697644097256",
"178574776650310598927179463337955362699",
"276977025882825147113640218437576551413",
"44148237642837399261991590990725672658",
"99148611962671455012476647486373040134",
"109386618134770884412641957636616669823",
"245461908808499999668221259832928066979"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-034f8e34",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/prev/v18/decode_graph_entities.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "309646442241553020961891524163576147997",
"length": 506
},
"id": "CVE-2026-5759-0b05f0cd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/prev/v18/decode_graph_entities.c",
"function": "RdbLoadDeletedEdges_v18"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "90273034022090288023989855542119584917",
"length": 1594
},
"id": "CVE-2026-5759-0eb1fa3e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/resultset/formatters/resultset_replybolt.c",
"function": "_ResultSet_BoltReplyWithSIValue"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"238312669270467875004135937386586627604",
"2940200868205509973476251709324512748",
"110296053213419915699948220548110492163",
"191731222119798231259798423616494057527",
"266916917974600063366434024500145747444",
"220529338879058228056305823411416126581",
"118938807160005201262376993940310553115",
"245461908808499999668221259832928066979"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-140955b7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/prev/v17/decode_graph_entities.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336513098640829313959810616902496966674",
"length": 391
},
"id": "CVE-2026-5759-1c9cdfcb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/prev/v17/decode_graph_entities.c",
"function": "RdbLoadDeletedNodes_v17"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"63104527968277488598801218659735928073",
"273110085907050528896913346320711675936",
"295672695592190263469941836062233701302",
"296003625056242664162168833540005669417"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-237e7a91",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/execution_plan/ops/op_procedure_call.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "309646442241553020961891524163576147997",
"length": 506
},
"id": "CVE-2026-5759-27d92e3f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/prev/v18/decode_graph_entities.c",
"function": "RdbLoadDeletedEdges_v18"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "171239804801162593269122858358115593290",
"length": 2107
},
"id": "CVE-2026-5759-2a195af3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/bolt_api.c",
"function": "write_value"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "320197453630771671925944892905044501468",
"length": 1320
},
"id": "CVE-2026-5759-2a771324",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/cron/tasks/stream_finished_queries.c",
"function": "CronTask_streamFinishedQueries"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "565488265556331089833881126528916243",
"length": 749
},
"id": "CVE-2026-5759-2c0c9462",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/execution_plan/ops/op_procedure_call.c",
"function": "ProcCallConsume"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "219234989052085412995415473262774057180",
"length": 506
},
"id": "CVE-2026-5759-304ab56b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/current/v19/decode_graph_entities.c",
"function": "RdbLoadDeletedNodes_v19"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"244156046775620153871696190297199795687",
"58000269923415681850936974408145434369",
"172277695819945225692375624789471368719",
"245795417647193141493541516331514108827",
"141346846243272373084105945114409659910",
"81643868056511257481093861388176879386",
"31626866312611891962023486568845940311",
"235148713352173773817430870258755413128",
"136488691426882165114374130343702702778",
"70355023503732480475759785743226709701",
"101423625890025223479252725434056801854",
"19930138390849434064612990092659801753",
"171295451657450093038617745361007634255",
"179658048250611782031462827608205860707",
"171539209353571790786051089469461919740",
"338145644465276927924328921929194543276",
"322933035494858407867319033549995141041",
"25855755020627890228621248197570642396",
"275459929220364880306437725332154306671",
"333004893960564127423387788585493558712",
"12847132277006318220289684021289915131",
"33735250661456747227092431654630291126",
"55741996131374585537997959199654484605",
"76748093118711530327488221708442421824",
"319080710785575211682193826111200961711",
"257945075357812705073088732122478359932",
"126789467426040733084139343392363240449",
"300545865951747749475331961020707849835",
"321510927920793497000273824724616233577",
"6079816699053004684951893230632730135",
"222818382544965669734709126986755040790",
"91326139421509445885330932007514262517",
"288126561980572399456642402428193834974",
"232876655273951031197047579398110066171",
"113025206221365840007221742122848814687",
"155796412859743319194901482327192641797",
"111176047465194048795871938975831867433",
"141752867602746518507999684207187422128",
"285109644432250659422331214454755879941",
"26571388923913227380191329761498342700",
"111087717505768571819141190114100948613",
"147106050191166040947920002135209334361",
"324075798262978552609570410104818322461",
"269334080305912033138701434633855092392",
"278480222725818258516152617609472200768",
"321952162465444229423448538341278762187",
"24163089402843860140950592816897954815",
"300477220592767521642538867311811543631",
"285079943479874426816298397289329977747",
"52012195846837656640898058750734507821",
"54229454161019449569148218913574130129",
"322767517253258798028432931927275676367",
"267629019939664661717632402173582210311",
"232913559394370829867303287165307676684",
"99536772560534313643911904893208375612",
"105360333726771316647086005468480128390"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-32d64ae7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/cron/tasks/stream_finished_queries.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"316102749062410314900002221917869270802",
"281324867384888521416880358398081225111",
"320304600884377535873703271626885666767",
"338303582194704683092778115047958842173",
"271858440746385972304603460296378985773",
"296080917021094184547005236996376671877",
"117826486723439369587792867943005417794",
"189224906594475935213505820896869595902",
"322969911647478189848838544610677506626",
"117120648357875007278689769530921411795",
"268291610120545713718416448955977378769",
"98824039175229055815277568591321541614",
"111584432657959831556460113732418879325",
"168567682689347108425322424151570338068",
"18439952974421629727255090062838386397",
"237389958837245145170829541273987542511",
"337157617495620987152253453535793385953",
"259543711152387879560192383204242283894",
"115256548415142760357589403800857700434",
"337157617495620987152253453535793385953",
"285889070068996056674982723842707414076",
"90901499720461116535769613030229231514",
"171305686426037279751191813090503394329",
"310745022896704061342501430870437704417",
"166362949647286186800059376368034922355",
"101434004842310986686469199631173221098",
"81268843219183043552765552168236956296",
"195562331822765692635441228230240580516",
"284465109962386981190836764047277759530",
"168866709192335025071654941232291728318",
"166853788038985384885070050983356000393",
"281971634759916399953531984564371043666",
"224549759879200833081521727921473545290",
"330558342905406464484623586084447885756"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-34e5c0f5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/globals.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "201256860554049433223301912712095983056",
"length": 2661
},
"id": "CVE-2026-5759-36e2f4e6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/commands/cmd_query.c",
"function": "_ExecuteQuery"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "219234989052085412995415473262774057180",
"length": 506
},
"id": "CVE-2026-5759-3700e5af",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/current/v19/decode_graph_entities.c",
"function": "RdbLoadDeletedNodes_v19"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"268749171734316784136842176822210610575",
"326835055123055442804202815472230859835",
"137338975216006603767703726125918570162",
"202137444345341984457782144746305002150",
"180504001365013271301360262693804323936",
"77013657322007979137584739360641650202",
"251937782646008262046422785528661732456",
"1612393527572749085661716584367864506",
"161313717595778351256288159630382571957",
"40952404646320590439459719809239161946",
"199140991876476464070373166153241434910",
"306370280170258375147978266020436704235",
"33985387809996106425875668746769538221",
"51789773801091714905054198692597952949",
"232314935717801592672036536646498922677",
"335648781117913912184931025816418923280",
"289905918738830641831988528214468020022",
"141934821012050865907545671265843624386",
"334043242118575364639318888503158147251",
"333134862161294673386632623846266404426",
"220425647404522258658312545585408926552",
"113941636328944639468681837435865870982",
"307411424421420011814971346767683176443",
"174710211364803557493420009854249085351",
"222153426706922551092053902812776678085",
"128241394153032058704439066527489989971",
"236574444792070493740884036655259092505",
"245335041639686054492110950331969423770",
"258572563060059155875327559824084050390",
"203506512122573029020730935759451985262",
"202532300531140159388031795668179914825",
"190583079747493417290734395547301375471",
"189898839244682199781080444730178406018",
"139087344280171615260833987474064625523",
"155424168710785408073631826394945763256",
"51107365972414597454517216300457817392",
"81602325153630583109827019975141279505",
"18000009958360319954015607000477424875",
"151781441896305049439785091683724570321",
"2790152359959244590203040640117287074",
"118473843973457685392253954888505771338",
"176620320310389666619582132070525774392",
"300173419579308425813658800665834181583",
"152521070518728426696433041444338867874",
"240764970159511715336154958225724254837",
"185055828765271069437444465904219591767",
"13022043706336879869310754624434617042",
"196097798107013775951871238159244259073",
"153853657725875774143261524019716943185",
"184209901290206069630012232037617732445",
"287175048513996408884464073609853371863",
"159140071155349313286532734966443984319",
"296028523458703508708892162337273004516",
"119047781381073380991092219741937805026",
"147912457884578695699465451854782510442",
"90403315394136852070363281171979090897",
"178779207395267132011851551817523030371",
"242197695071174838449120034048234265135",
"85795105914818961125914341583899085859",
"173487621734726621887952501330006754670",
"101366268159081617859200629992302300752",
"47983265340364715740707674507143132585",
"247095513321469482245808779795079516948",
"204583380520804622728496717772817654875",
"233855363167423396086356945113937790245",
"289497603296027877879060005278706982371",
"75407180318704451699303769443305508093",
"247737882948496399372864097020788021470",
"183900496452782573194224046580558800382",
"328665305967716380707431382631982927060",
"308669290788745115976303739879577484750",
"133140756015017151562488048651600395269",
"112189110827308123598732586593113099042",
"325756184394669990900715467429843545139",
"109864249304336809783318402790900916347",
"54908520563515321687973336872698712314",
"172538475698095841436739159378055623059",
"67463779372761732493126208579276575007",
"112719965861705761161200568313609229271",
"126779240664643266447460001334368520590",
"279675913131408460961077744017825319589",
"209110604617327335964002998906024101083",
"172818025056720310228738735181937393228",
"308472776061082217132826407738284091228",
"10725778620045084912056709026015862019",
"226883825949042670780049556377586227511",
"269692452865991363124828350111899989108",
"45549740028929084666323717896488567357",
"36700565739614221471085356664314020744",
"151047268479262815891423150261109805107",
"36632570288268735438178539098457783013",
"73354525444850954042531099456341067588",
"249775603206456943411051522956208363852",
"69293100559578975511275899709070398094",
"99568054268489606676005246596319275070",
"333820580239959912696409677175205664650",
"132899916192375737398708274206685752960",
"280981857741078703216421556819838211512",
"146358934825749832298775666040265131349",
"140935470942157063826894208991678272942",
"102497526706190398566259023031539749766",
"234062824656904642853483332962040616577",
"152343944060471546632295044055075834187",
"55457801472930622309400924047474037596",
"183109667016300786616021428641935204484",
"260928944429706161050664460810471173747",
"178502590307338145601924342996855371167",
"307311996131747022473110658509118343143",
"313369407265276944244566329386844473682",
"100452202265239077842309821103024086551",
"34544352580093410132003395901028252813",
"28458603122525275902586729062910781239",
"143260820044609727102427850131526188561",
"10276961209933423812080477782103839586",
"61710898640731591739929753202069194728",
"197086829977227413185467949733252246202",
"8886169221453735294301666638656232258",
"249051495228689385752449791419386100983",
"252332493875775162767803962958668803923",
"166388001640673657901567179834639520951",
"124900693899589467643670358485734679286",
"126349475266611909397592108266211947479",
"210995180560543319788200703157058981772",
"338241358692510646230688369992570277895",
"132578598394760857588728583181633239739",
"234295416946249056915267400300404091643",
"302617020336792734852918106020410769649",
"86764623418515275617852409988171289208",
"251776423903509557526680858152216028078",
"92916329294977912862621316683531467491",
"213391123241881145086234219542753083715"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-39dc00f1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/commands/cmd_query.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "67682943457410399909716557088198269222",
"length": 132
},
"id": "CVE-2026-5759-39fe3389",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/query_ctx.c",
"function": "_QueryCtx_ThreadSafeContextUnlock"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"83202772984804991508961391535713662081"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-3f5f43d7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/socket.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "243465550478231257053524171603753871753",
"length": 793
},
"id": "CVE-2026-5759-40990ba9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/graph/entities/attribute_set.c",
"function": "AttributeSet_RemoveIdx"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "255544594212913302385888324892515103891",
"length": 426
},
"id": "CVE-2026-5759-4777dfc0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/graph/graph_delete_edges.c",
"function": "_edge_cmp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"113411395831221581683523707832621522377",
"160794902712535384306011859100416856808",
"87689477000269423811339576749760818483",
"19394043235387624887254834480878196007"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-5358e32f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/execution_plan/ops/op_merge.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "219234989052085412995415473262774057180",
"length": 506
},
"id": "CVE-2026-5759-54446ceb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/prev/v18/decode_graph_entities.c",
"function": "RdbLoadDeletedNodes_v18"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"322431774366984005842498095182639099971",
"165869608788529775643210210083132603715",
"236081421034265974446188101993400907211",
"244489542908941334009866284044687197669"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-5647064f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/resultset/formatters/resultset_replybolt.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "309646442241553020961891524163576147997",
"length": 506
},
"id": "CVE-2026-5759-57bd46a7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/current/v19/decode_graph_entities.c",
"function": "RdbLoadDeletedEdges_v19"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"257831178070909134045040110480708849568",
"38326678188541923178473693185553506731",
"223496881658736897446349182663272489814",
"217153860841451221667668546282074824359",
"114498641615735726466706177837214286709"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-582cb845",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/ws.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"139524316813422918682205667918643358075",
"234084382731849359446146279790314259169",
"230367688083363810732624848633009952007",
"175514546228578915082288048959643355465",
"279389797493588674403614902431371651615",
"14680976723543448124236161087998961561",
"163660608271201465206362600131037483762",
"191731222119798231259798423616494057527",
"32534469762681316742004060682896940817",
"120387677387760877803716225697644097256",
"178574776650310598927179463337955362699",
"276977025882825147113640218437576551413",
"44148237642837399261991590990725672658",
"99148611962671455012476647486373040134",
"109386618134770884412641957636616669823",
"245461908808499999668221259832928066979"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-5844e113",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/prev/v18/decode_graph_entities.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"132070135624287911861535673319880502196",
"131054790672656235508240616494745762932",
"18117999341103166904353558700533854785",
"26950797162369859298426581293127663598"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-633e3ef7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/bolt.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "213342263803812734828989314808760504589",
"length": 155
},
"id": "CVE-2026-5759-73f81872",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/query_ctx.c",
"function": "QueryCtx_UnlockCommit"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"14082461139783428971833964956361063446",
"323997558317217603157377184267127466852",
"167907915416905717019892703368866648182",
"42478368482303860557212401944575891047",
"53391448647507038007471840501582875031",
"337936670612226470318049144413301317775",
"95909120762685640577035422664477622802",
"41724087965527799270610872206527944180",
"54631508930460763111670757775663417756",
"227304363538764832949417346524737641015",
"263375641298633169792382156420700338378",
"111181778916912009920764307011258897538",
"128318528349840957782603067195393927375",
"69355064112325856519160050598771273638",
"15965685243602634138855213657774375758",
"182576823546401003130335713025361700521",
"123983705204450771608083306455057226156",
"166485311942243269397838623803964524274",
"208736285930463047894809750396671851927",
"281415742676662467737688609919193311820",
"311573580991256816960720628006107457379",
"12130275465841776115159242192837608216",
"166485311942243269397838623803964524274",
"24277256694368580492211238629007314223",
"2692085866561740588206674368064900249",
"86821245297722265588123347830261021383",
"134498263144816540113715013707836187724",
"40862268341084989908403871434301660012",
"80789187655340574331331909144374538615",
"58730588638243481094805696123416181633",
"235612084331320198940673176197441599496",
"134195329520034664673058145994002947752",
"182061069199620838377371183991647631343",
"339549611385481431621225750710385861687",
"51336709927434845204706209885988330668",
"47856992953253203454143618975445168454",
"166485311942243269397838623803964524274",
"278912515427988190307057670928304929200",
"291754067530758833705048298035513573484",
"172172959447712606700958997043592000285",
"87705008441015785987986495193155839789",
"108604994623218385986486177396884329458",
"123726577130037044393224396557379584777",
"15711714155993821199560089221269154517",
"152760454370628433694161620618003916715",
"321624572917144073369979269932396161667",
"245990324219172708519159479037496807036",
"54631508930460763111670757775663417756",
"85936059278152798868606157502178630499",
"81365426936378492989355689374835934333",
"71684021787548602958098490723603350901",
"219678657777571046142349737171961785380",
"233546306089182774862982977684909467479",
"105068342290275809760274575545628679410",
"126500158228338259148803495410884931834",
"254571221101216611332078935183592370751",
"75484326523818169983278910334856191872",
"97373933296548188070394027094006610276",
"200396010389539933846228451703338184320",
"230528920541978763353854744644381477911",
"331319108450443232127945015515388303129",
"258952716265997706123088495041795548883",
"318287987600301694239832728993886210760",
"318697094315267911344705290541467024675",
"172615491800315366010870833674019926333",
"188223850878842690807003897293270857850",
"205252008273826811996902391503904345040",
"88836131006855629903863290329782353000",
"159051781634201561905615277534780293575",
"156111532815293603313375615814668512194",
"305636543430094764548526281198582249075",
"327589712701546633319451599123230265528",
"7326785541414088228068686398937979597",
"58442570335563755112981198799873784302",
"6645174915967215240660793410623147723",
"22765349986389236820907468343159609160",
"77481726620329583859470805616374819555",
"86671330681004663984631763124695264046",
"174165934591868149477063163299706165313",
"288009442462897671332711023812241921352",
"206236830505863680060076674014510738994",
"269232543263492136064482048432192892333",
"318028838120046226674847255129249233590",
"70102841133816063669892430842593986757",
"263436811787570467676084877097115881372",
"102452280575758932346421622998880733904",
"66113327548203190459572419106022620833",
"121609304581734582112828241337653605727",
"45566888384422570833981422554712456338",
"93305202397197954030511387633036402739",
"46354163043939886219163337703695065369",
"117846163036379885484311156036099805413",
"128005705594446369473837696587933328103",
"185069344580918088008131154344403583904",
"152902318891899385194768565967500644176",
"59211847639540451056307300311817700855",
"248673189442599789885585807579340148688",
"184231113711210729277423994604877188453",
"14922985658813564070377199896716459060",
"43804569517203720230087815684498967017",
"36986118712793323151216596578506584651",
"254258278070731298383373756651799981429",
"321152378568989209972868865255023070109",
"282427241480835871796109480927875383065",
"205267231525104155906224875530135196377",
"202389162621063973154186560713450745080",
"88391517929688625615785142999985107539",
"164763754894180696781378146161445369762",
"176857280427004249903919831589012642387",
"160837067050564409373945222349800982063",
"219561181676851553443265321827676249130",
"97381955649375149958597678507308076014",
"221517050183038673514889429709480156981",
"280367262823380135320840841059266167994",
"5694543519911197223999493529297331743",
"102607042142225930882799787728325433999",
"315522757331388293708845394893695846110",
"293061143816731940731275601494346926065",
"262827233827539126302889146516355700307",
"54982630834782248875474630979123715955",
"94440166180607390043125960894975116149",
"128356016807947321887643862641998611087",
"4396959885377651613664306746982317737",
"67010210497572076304278036273581338070",
"4567474121521669095041259561075226263",
"232790587702081744046082158435181374512",
"58052905547668914702642095453899155937",
"106517981410610112865104714990454839757",
"66867430982592125073266863423352092443",
"179262618479115370648972049839822996976",
"262230362944968882675185014993151516321",
"103272916515196871909110368901861182246",
"238798543154623603956275476859182248249",
"128764701547719263171078137589495488003",
"241179517614217953346614299895580450331",
"205180925451921506466200362666693379086",
"39771906807593884955503702791231917622",
"50926917720401929084456605874896055074",
"306355954825210397403023532378895853371",
"46843129010401899406566218094610232860",
"101216779185229769683309721870509227954",
"102055286568958870091741797973463492696",
"210709537894666060289661677634886155977",
"111492049344873706269703105474336417402",
"20663316466063480091556818635216622859",
"213440066605580722471126742033494983324",
"26368184443751178088631974697925319483",
"184194646134882291057464485703116960642",
"339061205815077748789129715423333405834",
"227865579412340163426332198841704608909",
"309706729974885338766679698761296303956",
"189554563658712323601519862787517700835",
"301199304572777746779859338997900940022",
"326621262283327651912628116006956879601",
"125739586487733539829564636030153882414",
"287636830083121495414144341216595085430",
"119825649531541422415966129463419918844"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-740287cc",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/bolt_api.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "219234989052085412995415473262774057180",
"length": 506
},
"id": "CVE-2026-5759-791b4820",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/prev/v18/decode_graph_entities.c",
"function": "RdbLoadDeletedNodes_v18"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "45772403194556820222415988332512896973",
"length": 1674
},
"id": "CVE-2026-5759-7dc57bab",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/commands/cmd_query.c",
"function": "_query"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "215478665851373120043008096532454130901",
"length": 939
},
"id": "CVE-2026-5759-7e8ef8f6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/query_ctx.c",
"function": "QueryCtx_LockForCommit"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "50428198106683321665438925579648881710",
"length": 1457
},
"id": "CVE-2026-5759-819719dc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/bolt_api.c",
"function": "is_authenticated"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"244601418580259255251076906733795552045",
"124273655892543167298985776602345439851",
"161319112228903057265187807561417158800",
"100183249411010372520126562852285767466",
"67675035131817691874928482623877381552",
"40150149687007575820428511909410306816",
"115643576542063811854963433981594663296",
"325073862500490715407274233896080132473",
"109746978754076512080042050550341514632"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-83eb08a4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/query_ctx.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "73188705288052820488824377830379481100",
"length": 220
},
"id": "CVE-2026-5759-9338d97f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/graph/tensor/tensor.c",
"function": "_value_cmp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"192247186120597738592267102093126511547",
"327961627421569119630414681940250048239",
"145255447306857954413385995854361274486",
"39174111078970003335858682146905974573",
"266101249171273195990259402868659331322",
"319583475582223319258630533429293259979",
"307011747049097184221863233072777042242",
"164960498757916189338102132204706700420"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-94345649",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/commands/index_operations.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "116913434005383991098707129213252135728",
"length": 301
},
"id": "CVE-2026-5759-9b2b751e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/buffer.c",
"function": "buffer_index_diff"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"31590947522003974848567754306260950223",
"300535888005228731550466796954646448105",
"12833526932915689330727864078660863060",
"182379393254170926871647186615337996211",
"181249849568180984475457540379755591896",
"204444816175042894173424651064094951444",
"267058485750952412377738514603528281944",
"143033489426833169868741897727745418666",
"204617140342777015688267817396734465318",
"289060832685623355550726081249522705347",
"150620412972720544612029803062649106629",
"233418467221690452197355032760748735100",
"140094148523685960309711190631482952451",
"160019872843715911041340143532616051172",
"276647393921561000471085718149633184319",
"218435083961109680179124949885416065577",
"262336350234152530973781769401934047383",
"113701220876785983908770735293227313728",
"57290381562753237949179215822461349365",
"102942923394863168139904861481449164468",
"126096462984475916160837737631329612111",
"158764742346444587755190479465899398150"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-9e7bfc65",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/buffer.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"169625932935261511136406000216084068",
"262496490850576944669428037167170064005",
"190344455443090623454424713040920978857",
"274159296731110501347141791093152359583",
"241313606850287986613074667237468460925",
"250383265179088645901043664054884129402"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-9e8c5726",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "tests/unit/test_value.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "16770443611519906528999746436902655226",
"length": 1912
},
"id": "CVE-2026-5759-a06c02c6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/bolt_api.c",
"function": "BoltRunCommand"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"96312915568911700131745282788442835301",
"9690105091384932033389418373218080420",
"314807840978314079621096960090531344995",
"241020093222701402587854018654207428974"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-a2838793",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/graph/entities/attribute_set.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"238312669270467875004135937386586627604",
"2940200868205509973476251709324512748",
"110296053213419915699948220548110492163",
"191731222119798231259798423616494057527",
"266916917974600063366434024500145747444",
"220529338879058228056305823411416126581",
"118938807160005201262376993940310553115",
"245461908808499999668221259832928066979"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-a2a5f772",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/prev/v17/decode_graph_entities.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"152410170761371488139377360162075924392",
"116238888773375307184069347082090667266",
"83268151908252463909815494654717219477",
"330194633651855589081401968130278423731"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-a786a5c4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/graph/tensor/tensor.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "310693602356353900084780934849072242560",
"length": 1723
},
"id": "CVE-2026-5759-a7f80d9b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/value.c",
"function": "SIValue_Compare"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"139524316813422918682205667918643358075",
"234084382731849359446146279790314259169",
"230367688083363810732624848633009952007",
"175514546228578915082288048959643355465",
"279389797493588674403614902431371651615",
"14680976723543448124236161087998961561",
"163660608271201465206362600131037483762",
"191731222119798231259798423616494057527",
"32534469762681316742004060682896940817",
"120387677387760877803716225697644097256",
"178574776650310598927179463337955362699",
"276977025882825147113640218437576551413",
"44148237642837399261991590990725672658",
"99148611962671455012476647486373040134",
"109386618134770884412641957636616669823",
"245461908808499999668221259832928066979"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-a8882b0d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/current/v19/decode_graph_entities.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "335658217766614395214489075217880990863",
"length": 708
},
"id": "CVE-2026-5759-abc29329",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/buffer.c",
"function": "buffer_write"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "38292613591757600428508519847858235076",
"length": 291
},
"id": "CVE-2026-5759-b2ff732a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/ws.c",
"function": "ws_write_frame_header"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336513098640829313959810616902496966674",
"length": 391
},
"id": "CVE-2026-5759-b7f6cc36",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/prev/v17/decode_graph_entities.c",
"function": "RdbLoadDeletedNodes_v17"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "330877141686564157920662237536594008911",
"length": 907
},
"id": "CVE-2026-5759-c4ab0727",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/bolt_api.c",
"function": "get_query"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"2445556364056142464253060244592422894",
"80107568142694910627005119271365839917",
"174140699687298217515995892621203395152",
"62387633973864153620060481318775498107"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-c7dacaf2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/execution_plan/ops/shared/create_functions.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"67330257202928185484660458421431559735",
"268823491681644606208925900311640535927",
"86578813672661681132573353945675190299",
"293673855449820467233914511243082806048",
"10010170284537159002309580675848595056",
"248338246929197979813932455294317421037",
"314657272822958080633674706577649110408",
"281010966823817791501338183552680863493"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-ca2782d8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "tests/unit/test_attribute_set.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"120222183362837890423962602348606937671",
"306688055590917500962522797212574512145",
"234839843608730906309316305311511945366",
"39200806149674020282806970968971122957",
"123732252407669823129942604225810988155",
"166397862290517188448912092656523054685",
"339341487190466103133769297357533109614",
"28479584370076633722426276977786586861",
"161785655336680824913671886895029512965",
"69445631700638452647746735542195420395",
"112602651703195174290161558942769613506",
"39229067931523722925935250079177450490",
"208756452860372001462090052757583550876",
"271585992659074808723601326269935709754",
"94472010736819091718755636851020264062",
"211297500802625592849446782253111093844",
"11446533511925609954814709255966400360",
"277167071673439900874817723181407973574",
"176481175934887536954542337093698928302",
"267800239356226119385217753512702683403",
"214971244565810081829975164905641551702",
"205759273923656876847212824890878874225",
"243329695148548198891748701156173654301",
"252720021407336182626841812091150897056",
"303207355942995906786247674378686055111",
"149423612132877692375250369012026972554",
"170643872285651797393504180817110237568",
"97706024797415566225521742851828090660",
"210238139626838298448722754498628844055",
"217802711293194262131021041077766237636",
"64151812787510017824698389269785548669",
"230225110227394565272184749646032387323",
"125684597968376049877397735014453408576",
"322395424346004743677758965703651045028",
"65445641791591334478542472479832793616",
"56723483398429914116233476180730054655",
"284308130640235910159495938198756081277",
"178035162282537241296482167325625222689",
"86423360050614796511967087689290315989",
"276972884576769697459706324790239106655",
"38268158957776414348804170074801796837",
"231554936833266472446761530052843693695",
"59631461785847069247572744781451468743",
"15246457999300241957798700428248133071",
"6156386769117825137473311764440700358",
"27915925664144860377155464784807813321",
"16580734189715665645771974814562317513",
"210084061354023970703919495206843610764",
"101656638927493902889485771370042699743",
"89161242884195497988236936149353483789",
"95857066508486418493939229230642582182",
"303860609303217548573789675514229660191",
"147948615122577751594337092739379717636",
"60444840304454423848277913144940677668",
"11116611088993660866486437863256904287",
"323310101905154906884914697004407436243",
"211414009098958399085952346666001586941",
"332633449895170881439086524706197240416",
"41529341149064807476859427248099658297",
"137893715918320733319300682191405509967",
"101719980402112824695288429036821682445",
"219842237592638672791236616870914668979",
"197508516873099315735302217551015807870"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-ca6b98a8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/query_ctx.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336513098640829313959810616902496966674",
"length": 391
},
"id": "CVE-2026-5759-d163c3b6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/prev/v17/decode_graph_entities.c",
"function": "RdbLoadDeletedEdges_v17"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "208666435311231234280431138404974537554",
"length": 99
},
"id": "CVE-2026-5759-d8eaa778",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/ws.c",
"function": "ws_write_empty_header"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "239461424030425221497012166180769970986",
"length": 758
},
"id": "CVE-2026-5759-d9b2207d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/buffer.c",
"function": "buffer_socket_read"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"262973741042750562363721708566107288389",
"95034889298690865157265054218857504262",
"217853645634891216805455095880247766002",
"224461684619112018914595248178188292723"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-da300a8f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/value.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"106086856566783957364923245932354477708",
"314460206268665961243638392912955822400",
"280721628884786217589160917574809446179",
"169177959141273156594151333157345373266",
"214400939714202816479497150467613205226",
"8122901510253821272943417958425684101",
"297781039358304834458760207077351442016",
"260750732678609536845045983701258036276"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-dd87416a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/execution_plan/ops/op_delete.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "26799293426319118652314753438445850574",
"length": 369
},
"id": "CVE-2026-5759-defc7904",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/globals.c",
"function": "Globals_RemoveGraph"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"258263736250921171050239574053297383663",
"317614413453157643281465089698581362825",
"213493014629447099877170683025732809858",
"131937634516304479460963261228339996902",
"47269395172437938911232662887420322052",
"292707844491359077691740224423305961168",
"44998158353711975081217260424980251635",
"309123685446227876277317623499261679811",
"302981273942481055190270783628321231481",
"181745657235022602235450658614128093831",
"72266127747301958244284358102536536158",
"311973674708114342814832968257538176128",
"79206903740535045795108424954468400105",
"332096527802923092599946868506705420823",
"44833707529193736352512693545503560644",
"71894313019449112413958689745128620586",
"269984017192133641133406614793383582233",
"193064806170606391166393441854242511674",
"189705185329111555670483293974150651703",
"98834325559991201134120239265685797644",
"215379615399619641578253470578424809681",
"231778883181902065368865548061095106551",
"57640467842299442325195358560880195234",
"102078452501710445057741547404548433711",
"312413160730201490484598002821137098724",
"309994982025392358841383681949868788454",
"75144376844334525678258414913498281198",
"293965524615067360792058767242740615070",
"136960973900659595927487667040951384734",
"57930718093990659726840540811952758952",
"70643011567499292988279094261082935454",
"283454973867620365074163295775300710585"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-e0c51aed",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/ws.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "307851162750252728430888811513919914191",
"length": 970
},
"id": "CVE-2026-5759-e24b648f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/ws.c",
"function": "validate_headers"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"139524316813422918682205667918643358075",
"234084382731849359446146279790314259169",
"230367688083363810732624848633009952007",
"175514546228578915082288048959643355465",
"279389797493588674403614902431371651615",
"14680976723543448124236161087998961561",
"163660608271201465206362600131037483762",
"191731222119798231259798423616494057527",
"32534469762681316742004060682896940817",
"120387677387760877803716225697644097256",
"178574776650310598927179463337955362699",
"276977025882825147113640218437576551413",
"44148237642837399261991590990725672658",
"99148611962671455012476647486373040134",
"109386618134770884412641957636616669823",
"245461908808499999668221259832928066979"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-eeb680c1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/serializers/decoders/current/v19/decode_graph_entities.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "116050704362765100847285771737061445948",
"length": 1080
},
"id": "CVE-2026-5759-f222ce4b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/bolt/bolt_client.c",
"function": "bolt_change_txstreaming_state"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "127774928162175735037636287895088828672",
"length": 230
},
"id": "CVE-2026-5759-f235fe3e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/query_ctx.c",
"function": "_QueryCtx_UnlockCommit"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"162184143702287704945609783214507542910",
"78719870353543356382519478396625277370",
"114853210101997919939518921453879452113",
"47528376125204337767306269195510336100",
"203385621493208233089060227229416248765",
"23057131382921156028129354558509166096"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-f962b6f0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/graph/graph_delete_edges.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336513098640829313959810616902496966674",
"length": 391
},
"id": "CVE-2026-5759-fc36f07a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/523d98ac7ffe99f11a9c95c258025c235f0dff4c",
"target": {
"file": "src/serializers/decoders/prev/v17/decode_graph_entities.c",
"function": "RdbLoadDeletedEdges_v17"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"42405720058882412648271582937585825304",
"22796275418460926260660599761502640598",
"57353984123542138865061114971436843532",
"153891235434053817177237037914520849673"
],
"threshold": 0.9
},
"id": "CVE-2026-5759-fe9c835c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/falkordb/falkordb/commit/83a77dfb95bc40be98080dd5abdcc904dfcaf75a",
"target": {
"file": "src/execution_plan/ops/op_update.c"
}
}
]
"2026-10-10T07:06:18Z"