CVE-2020-35668: Redislabs Redisgraph

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced.

Affected products

• Redislabs Redisgraph: from 2.0.0, before 2.2.11 (fixed in 2.2.11)

Published 2020-12-23. Last modified 2026-06-17.