Database

In Redis versions up to and including 8.0.3 a medium severity vulnerability CVE-2025-46686 was detected. This vulnerability allows authenticated attackers to cause excessive memory consumption by sending a multi-bulk command with many bulks, even if the command is skipped due to insufficient permissions. Currently, there is no fix version for this issue. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-46686.

In Oracle MySQL Client versions 8.0.0 through 8.0.42, 8.4.0 through 8.4.5 and 9.0.0 through 9.3.0 a low severity vulnerability CVE-2025-50081 was detected in the mysqldump component. This vulnerability allows high-privileged attackers with network access and requiring user interaction to perform unauthorized updates, inserts, deletes, or read access to MySQL Client-accessible data. Currently, there is no fix version for this issue. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-50081.

In Oracle MySQL Server versions 8.0.0 through 8.0.42 a medium severity vulnerability CVE-2025-53023 was detected in the Replication component. This vulnerability allows high-privileged attackers with network access to cause a hang or repeatable crash of the MySQL Server, resulting in denial-of-service (DoS). Currently, there is no fix version for this issue. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-53023.

In Oracle MySQL Server versions 8.0.0 through 8.0.42, 8.4.0 through 8.4.5 and 9.0.0 through 9.3.0 a medium severity vulnerability CVE-2025-50087 was detected in the Optimizer component. This vulnerability allows high-privileged attackers with network access to create, delete, or modify critical data without authorization. Currently, there is no fix version for this issue. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-50087.

In SQLite versions prior to 3.50.2 a high severity vulnerability CVE-2025-6965 was detected. This vulnerability, caused by integer truncation when the number of aggregate terms exceeds the number of available columns, may lead to memory corruption. To address this issue, users should upgrade SQLite to versions 3.50.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-6965.

In MongoDB Server versions prior to 8.0.10 a medium severity vulnerability CVE-2025-6712 was detected. This vulnerability allows attackers to cause the MongoDB server to crash by triggering excessive memory usage. To fix this issue users should upgrade MongoDB to version 8.0.10. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-6712.

In MongoDB Server versions prior to 8.0.5 (8.0 series), 7.0.18 (7.0 series), and 6.0.21 (6.0 series) a medium severity vulnerability CVE-2025-6711 was detected. This vulnerability allows attackers to access sensitive query data that may be unintentionally logged by the MongoDB server. To fix this issue users should upgrade MongoDB to versions 8.0.5, 7.0.18, 6.0.21, and 8.1.0-rc0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-6711.

In Redis versions prior to 8.0.3, 7.4.5, 7.2.10, and 6.2.19 a medium severity vulnerability CVE-2025-48367 was detected. This vulnerability allows attackers to cause a denial of service by sending malformed connection requests that disrupt Redis server operation. To fix this issue users should upgrade Redis to versions 8.0.3, 7.4.5, 7.2.10, and 6.2.19. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-48367.

In Redis versions from 2.8 up to 8.0.3, 7.4.5, 7.2.10, and 6.2.19 a high severity vulnerability CVE-2025-32023 was detected. This vulnerability allows attackers to run malicious code on the server by exploiting a flaw in how Redis handles certain commands, potentially taking full control of the system. To fix this issue uesers should upgrade Redis to versions 8.0.3, 7.4.5, 7.2.10, and 6.2.19. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-32023.