valkey-io vulnerabilities
10 published CVEs name valkey-io among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-86227
valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds
valkey-io · valkey
Low2.3 - CVE-2026-85522
valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds
valkey-io · valkey
Medium6.9 - CVE-2026-82677
valkey-io valkey Module Timer module.c moduleTimerHandler double free
valkey-io · valkey
Medium4.8 - CVE-2026-82631
valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free
valkey-io · valkey
Low2.1 - CVE-2026-63639
Valkey: UAF in stream deserialization may lead to remote code execution
valkey-io · valkey
High8.8 - CVE-2026-56684
Valkey: TLS pending-data processing use-after-free may allow remote code execution
valkey-io · valkey
High7.5 - CVE-2026-21864
Remote DoS from malformed RESTORE command
valkey-io · valkey-bloom
Medium6.5 - CVE-2026-27623
Valkey has Pre-Authentication DOS from malformed RESP request
valkey-io · valkey
High7.5 - CVE-2026-21863
Malformed Valkey Cluster bus message can lead to Remote DoS
valkey-io · valkey
High7.5 - CVE-2025-67733
Valkey Affected by RESP Protocol Injection via Lua error_reply
valkey-io · valkey
High8.5