Comment by rurounijones

> My gut says that any application using this library to process untrusted input is exploitable

Well, it is extracted from Redis so that should be easy to test