Vendor
Valkey-io
10 known vulnerabilities in products by Valkey-io, 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-63639 | Valkey: UAF in stream deserialization may lead to remote code execution | 8.8 | |
| Medium | CVE-2026-85522 | valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds | 5.3 | |
| High | CVE-2026-21863 | Malformed Valkey Cluster bus message can lead to Remote DoS | 7.5 | |
| High | CVE-2025-67733 | Valkey Affected by RESP Protocol Injection via Lua error_reply | 8.5 | |
| High | CVE-2026-56684 | Valkey: TLS pending-data processing use-after-free may allow remote code execution | 7.5 | |
| High | CVE-2026-27623 | Valkey has Pre-Authentication DOS from malformed RESP request | 7.5 | |
| Low | CVE-2026-86227 | valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds | 3.1 | |
| Medium | CVE-2026-82677 | valkey-io valkey Module Timer module.c moduleTimerHandler double free | 2.4 | |
| High | CVE-2026-21864 | Remote DoS from malformed RESTORE command | 6.5 | |
| Low | CVE-2026-82631 | valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free | 2.2 |
Products
| Valkey | 9 | 0 |