Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.9, Dragonfly has a RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer. An authenticated user can inject arbitrary RESP messages into the connection's response stream, potentially causing response desynchronization in connection-pool clients. This vulnerability is fixed in 1.39.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-47206 RESP Protocol Injection via Lua redis.error_reply() in Dragonfly Before 1.39.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47206
Post summary
The post references CVE-2026-47206, describing it as an RESP protocol injection in Dragonfly via Lua redis.error_reply() for versions prior to 1.39.9, and provides a link to a Vulmon page for details.