Vulnerabilities in valkey-io
10 resultsCVE-2026-63639HIGHValkey: UAF in stream deserialization may lead to remote code executionEPSS 0.9%CVE-2026-85522MEDIUMvalkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-boundsEPSS 0.9%CVE-2026-21863HIGHMalformed Valkey Cluster bus message can lead to Remote DoSEPSS 0.8%CVE-2025-67733HIGHValkey Affected by RESP Protocol Injection via Lua error_replyEPSS 0.6%CVE-2026-56684HIGHValkey: TLS pending-data processing use-after-free may allow remote code executionEPSS 0.5%CVE-2026-86227LOWvalkey-io valkey kvstore.c kvstoreGetHashtable out-of-boundsEPSS 0.5%CVE-2026-27623HIGHValkey has Pre-Authentication DOS from malformed RESP requestEPSS 0.4%CVE-2026-82631LOWvalkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after freeEPSS 0.4%CVE-2026-21864MEDIUMRemote DoS from malformed RESTORE commandEPSS 0.3%CVE-2026-82677MEDIUMvalkey-io valkey Module Timer module.c moduleTimerHandler double freeEPSS 0.3%