Vulnerabilidades em valkey-io
10 resultadosAnálise Vexday
Valkey-io apresenta 4 vulnerabilidades catalogadas, todas com validação inadequada de entrada (CWE-20), mas nenhuma em exploração ativa ou com classificação crítica. O perfil de risco é moderado e estável, sem descobertas recentes nos últimos 90 dias, indicando que a superfície de ataque conhecida não evolui rapidamente.
CVE-2026-63639HIGHValkey: UAF in stream deserialization may lead to remote code executionEPSS 0.9%CVE-2026-21863HIGHMalformed Valkey Cluster bus message can lead to Remote DoSEPSS 0.8%CVE-2025-67733HIGHValkey Affected by RESP Protocol Injection via Lua error_replyEPSS 0.6%CVE-2026-56684HIGHValkey: TLS pending-data processing use-after-free may allow remote code executionEPSS 0.5%CVE-2026-85522MEDIUMvalkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-boundsEPSS 0.5%CVE-2026-82631LOWvalkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after freeEPSS 0.4%CVE-2026-27623HIGHValkey has Pre-Authentication DOS from malformed RESP requestEPSS 0.4%CVE-2026-86227LOWvalkey-io valkey kvstore.c kvstoreGetHashtable out-of-boundsEPSS 0.3%CVE-2026-82677MEDIUMvalkey-io valkey Module Timer module.c moduleTimerHandler double freeEPSS 0.3%CVE-2026-21864MEDIUMRemote DoS from malformed RESTORE commandEPSS 0.3%