Npm · Redis-Parser · CVE-2026-93435
**Name of the Vulnerable Software and Affected Versions**
redis-parser versions prior to 3.0.1
**Description**
A denial of service issue exists in the RESP (Redis Serialization Protocol) parser. Malicious Redis endpoints can crash the client process by sending crafted RESP byte streams containing repeated array headers. This triggers unbounded recursion on nested arrays, which exhausts the V8 call stack and results in an uncaught RangeError, terminating the Node.js process without triggering error handling callbacks.
**Recommendations**
Update redis-parser to a version later than 3.0.0.