VYPR

RedisArrayAggregator

by Netty

CVEs (1)

  • CVE-2026-93572HigSep 18, 2026
    risk 0.49cvss 7.5epss 0.01

    A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis (RESP) array headers. This can cause the `RedisArrayAggregator` to eagerly preallocate a large amount of heap memory, leading…