{"schema_version":1,"title":"FalkorDB vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in FalkorDB: 7 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-88412, was published on 21 September 2026.","url":"https://junglewise.ai/threats/technologies/falkordb","json_url":"https://junglewise.ai/threats/technologies/falkordb.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/falkordb","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":5,"all_time":7,"critical":0,"exploited":0,"last_7_days":7,"last_30_days":7,"last_90_days":7,"last_365_days":7},"latest":[{"cve":"CVE-2026-88412","cvss":5.3,"epss":0.004,"slug":"cve-2026-88412-an-integer-overflow-in-the-bulkinsert-readproperty-component-bulk","title":"FalkorDB integer overflow in bulk insert array parsing","severity":"medium","exploited":false,"published_at":"2026-09-21T21:17:15.513+00:00","url":"https://junglewise.ai/threats/cve-2026-88412-an-integer-overflow-in-the-bulkinsert-readproperty-component-bulk"},{"cve":"CVE-2026-88411","cvss":7.5,"epss":0.0049,"slug":"cve-2026-88411-improper-error-handling-in-the-graph-effect-component-effects","title":"FalkorDB GRAPH.EFFECT improper error handling denial of service","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.38+00:00","url":"https://junglewise.ai/threats/cve-2026-88411-improper-error-handling-in-the-graph-effect-component-effects"},{"cve":"CVE-2026-88410","cvss":7.1,"epss":0.0032,"slug":"cve-2026-88410-the-graph-udf-in-falkordb-redis-module-v4-20-1-to-v4-20-4-is-not","title":"FalkorDB graph.UDF write flag missing and uninterruptible execution","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.247+00:00","url":"https://junglewise.ai/threats/cve-2026-88410-the-graph-udf-in-falkordb-redis-module-v4-20-1-to-v4-20-4-is-not"},{"cve":"CVE-2026-88409","cvss":8.8,"epss":0.0048,"slug":"cve-2026-88409-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB buffer overflow in GraphBLAS matrix decode","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.12+00:00","url":"https://junglewise.ai/threats/cve-2026-88409-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88408","cvss":6.5,"epss":0.0041,"slug":"cve-2026-88408-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB stack overflow in _GetGroup function","severity":"medium","exploited":false,"published_at":"2026-09-21T21:17:14.99+00:00","url":"https://junglewise.ai/threats/cve-2026-88408-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88407","cvss":7.5,"epss":0.0046,"slug":"cve-2026-88407-an-out-of-bounds-read-in-the-node-token-count-relation-token","title":"FalkorDB out-of-bounds read in GRAPH.BULK command","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:14.86+00:00","url":"https://junglewise.ai/threats/cve-2026-88407-an-out-of-bounds-read-in-the-node-token-count-relation-token"},{"cve":"CVE-2026-88406","cvss":7.5,"epss":0.0046,"slug":"cve-2026-88406-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB stack overflow in UNION clause validation","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:14.733+00:00","url":"https://junglewise.ai/threats/cve-2026-88406-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"FalkorDB","slug":"falkordb","vendor":{"name":"FalkorDB","slug":"falkordb","url":"https://junglewise.ai/threats/vendors/falkordb"},"aliases":[],"category":"library","description":"FalkorDB is a graph database library for storing and querying graph data structures.","url":"https://junglewise.ai/threats/technologies/falkordb"},"most_severe":[{"cve":"CVE-2026-88409","cvss":8.8,"epss":0.0048,"slug":"cve-2026-88409-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB buffer overflow in GraphBLAS matrix decode","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.12+00:00","url":"https://junglewise.ai/threats/cve-2026-88409-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88411","cvss":7.5,"epss":0.0049,"slug":"cve-2026-88411-improper-error-handling-in-the-graph-effect-component-effects","title":"FalkorDB GRAPH.EFFECT improper error handling denial of service","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.38+00:00","url":"https://junglewise.ai/threats/cve-2026-88411-improper-error-handling-in-the-graph-effect-component-effects"},{"cve":"CVE-2026-88407","cvss":7.5,"epss":0.0046,"slug":"cve-2026-88407-an-out-of-bounds-read-in-the-node-token-count-relation-token","title":"FalkorDB out-of-bounds read in GRAPH.BULK command","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:14.86+00:00","url":"https://junglewise.ai/threats/cve-2026-88407-an-out-of-bounds-read-in-the-node-token-count-relation-token"},{"cve":"CVE-2026-88406","cvss":7.5,"epss":0.0046,"slug":"cve-2026-88406-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB stack overflow in UNION clause validation","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:14.733+00:00","url":"https://junglewise.ai/threats/cve-2026-88406-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88410","cvss":7.1,"epss":0.0032,"slug":"cve-2026-88410-the-graph-udf-in-falkordb-redis-module-v4-20-1-to-v4-20-4-is-not","title":"FalkorDB graph.UDF write flag missing and uninterruptible execution","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.247+00:00","url":"https://junglewise.ai/threats/cve-2026-88410-the-graph-udf-in-falkordb-redis-module-v4-20-1-to-v4-20-4-is-not"},{"cve":"CVE-2026-88408","cvss":6.5,"epss":0.0041,"slug":"cve-2026-88408-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB stack overflow in _GetGroup function","severity":"medium","exploited":false,"published_at":"2026-09-21T21:17:14.99+00:00","url":"https://junglewise.ai/threats/cve-2026-88408-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88412","cvss":5.3,"epss":0.004,"slug":"cve-2026-88412-an-integer-overflow-in-the-bulkinsert-readproperty-component-bulk","title":"FalkorDB integer overflow in bulk insert array parsing","severity":"medium","exploited":false,"published_at":"2026-09-21T21:17:15.513+00:00","url":"https://junglewise.ai/threats/cve-2026-88412-an-integer-overflow-in-the-bulkinsert-readproperty-component-bulk"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}