Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-0303-c934-7a14
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-0303-c934-7a14.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-0303-c934-7a14
Upstream
CVE-2026-93435
GHSA-gf2v-78w3-qhcv
Published
2026-10-15T14:41:49Z
Modified
2026-10-15T15:15:04Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-93435
https://nvd.nist.gov/vuln/detail/CVE-2026-93435
https://github.com/redis/ioredis/issues/2108
https://github.com/NodeRedis/node-redis-parser
https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L204-L213
https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L291-L306
https://www.vulncheck.com/advisories/redis-parser-through-3.0.0-denial-of-service-via-unbounded-recursion
https://github.com/NodeRedis/node-redis-parser/issues/66
https://github.com/advisories/GHSA-gf2v-78w3-qhcv
Affected packages
Echo:npm
/
ioredis
Package
Name
ioredis
Purl
pkg:npm/ioredis
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
5.11.1+echo.1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-0303-c934-7a14.json"
ECHO-0303-c934-7a14 - OSV