FA
Product
FalkorDB
7
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 3Medium 0Low 0
Watch
Add FalkorDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107908 | 9.8 | Oct 9 | Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message Affected: before 4.20.0 |
| CVE-2026-5759 | 9.8 | Oct 9 | Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB Affected: before 4.18.1 |
| CVE-2026-107909 | 9.1 | Oct 9 | Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length Affected: before 4.20.0 |
| CVE-2026-7826 | 9.1 | Oct 9 | Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB Affected: before 4.18.4 |
| CVE-2026-107910 | 8.1 | Oct 9 | Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling Affected: before 4.20.0 |
| CVE-2026-7827 | 8.1 | Oct 9 | Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB Affected: before 4.18.4 |
| CVE-2026-107911 | 7.5 | Oct 9 | Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument Affected: before 4.20.0 |
Showing 7