Valkey vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
18 matching records
- High8.8ZDI-26-833: Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution VulnerabilityOpen the advisoryOct 28, 2026
- High8.8Integer truncation in Valkey cluster publish message construction causes a heap buffer overflowOpen the advisoryOct 26, 2026
- High8.8Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisorySep 9, 2026
- High8.8Unauthenticated use-after-free of the Lua interpreter state in Valkey (script debugger command cache)Open the advisoryAug 31, 2026
- High7.5Use-after-free in the RDMA pending-data handler when a clientOpen the advisoryAug 31, 2026
- High8.8Valkey is a distributed key-value database.Check if you run itEPSS 0.89%Jul 22, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.52%Jul 22, 2026
- High7.5Valkey-Bloom is a Rust based Valkey module which brings a Bloom Filter (Module) data type into the Valkey distributed key-value database.Check if you run itEPSS 0.30%Feb 24, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.40%Feb 23, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.85%Feb 23, 2026
- High8.5Valkey is a distributed key-value database.Check if you run itEPSS 0.65%Feb 23, 2026
- Critical10.0Redis redis Use After FreePatch nowKEVEPSS 82.64%Oct 3, 2025
- Low3.1setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used.Check if you run itEPSS 0.26%Jun 2, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey benchmark tool with MPTCP, the kernel paniCheck if you run itEPSS 0.59%May 1, 2025
- High7.5Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 0.87%Apr 23, 2025
- Medium4.4Denial-of-service due to malformed ACL selectorsCheck if you run itEPSS 0.40%Oct 7, 2024
- High8.8Lua library commands may lead to stack overflow and potential RCECheck if you run itEPSS 4.46%Oct 6, 2024
- Medium6.5Denial-of-service due to unbounded pattern matchingCheck if you run itEPSS 1.01%Oct 6, 2024
Sort
18 records