Valkey vulnerabilities

2 known vulnerabilities in Valkey from Lfprojects. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  redis: Use After Free

  CVE-2025-49844Oct 3, 2025RedisEPSS 83.2%

  Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exec

• 7.5 High severity

  redis: Allocation of Resources Without Limits or Throttling

  CVE-2025-21605Apr 23, 2025Redis

  Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis c