Valkey-Io

9 CVEs across 2 Valkey-Io products. Browse Valkey-Io vulnerabilities, severities, and proof-of-concept exploits.

Valkey-Io products with known CVEs

ProductCVEs
Valkey8
Valkey-Bloom1
Valkey-Io CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-85522Medium5.32026-09-04A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_…
CVE-2026-82677Low2.42026-08-31A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Su…
CVE-2026-82631Low2.22026-08-31A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the…
CVE-2026-63639High8.82026-08-18Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload t…
CVE-2026-56684High7.52026-08-18Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list whi…
CVE-2026-21864Medium6.52026-02-24Valkey-Bloom is a Rust based Valkey module which brings a Bloom Filter (Module) data type into the Valkey distributed key-value database. Prior to commit a6861…
CVE-2026-27623High7.52026-02-23Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the…
CVE-2026-21863High7.52026-02-23Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port can…
CVE-2025-67733High8.52026-02-23Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary…