GSSA-2026-04-QH1CCP2026-04-256.5 Medium
Cache invalidation used blocking Redis KEYS command in cobc-events
`CacheService.invalidatePattern` called `redis.keys(pattern)`, which blocks the Redis instance. On large keyspaces this could stall the entire Redis server and create a denial-of-service condition.
CacheService.invalidatePattern called redis.keys(pattern), which blocks the Redis instance. On large keyspaces this could stall the entire Redis server and create a denial-of-service condition.