VA
Vendor
valkey-io
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-86227 | VA valkey valkey-io | 3.1 | Sep 6 | valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds |
| CVE-2026-85522 | VA valkey valkey-io | 5.3 | Sep 4 | valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds |
| CVE-2026-82677 | VA valkey valkey-io | 2.4 | Aug 31 | valkey-io valkey Module Timer module.c moduleTimerHandler double free |
| CVE-2026-82631 | VA valkey valkey-io | 2.2 | Aug 31 | valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free |
| CVE-2026-63639 | VA valkey valkey-io | 8.8 | Aug 18 | Valkey: UAF in stream deserialization may lead to remote code execution |
| CVE-2026-56684 | VA valkey valkey-io | 7.5 | Aug 18 | Valkey: TLS pending-data processing use-after-free may allow remote code execution |
| CVE-2026-21864 | VA valkey-bloom valkey-io | 7.5 | Feb 24 | Remote DoS from malformed RESTORE command |
| CVE-2026-27623 | VA valkey valkey-io | 7.5 | Feb 23 | Valkey has Pre-Authentication DOS from malformed RESP request |
| CVE-2026-21863 | VA valkey valkey-io | 7.5 | Feb 23 | Malformed Valkey Cluster bus message can lead to Remote DoS |
| CVE-2025-67733 | VA valkey valkey-io | 7.1 | Feb 23 | Valkey Affected by RESP Protocol Injection via Lua error_reply |