monitor

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

CVE-2025-67733

RESP Protocol Injection PoC Proof-of-concept demonstrating RESP Protocol Injection vulnerability via Lua script error messages in Valkey/Redis. Files backend.py Flask backend simulating a web application with shared Valkey connection connection pooling. Endpoints: Method| Endpoint| Description...

CVE-2025-49844-discovery

ElastiCache Redis/Valkey Network Analysis Tools Scripts to audit AWS ElastiCache Redis and Valkey clusters for network exposure. Prerequisites AWS CLI configured with appropriate credentials jq installed: brew install jq Scripts list-elasticache-clusters.sh Lists all Redis/Valkey clusters across...

CVE-2026-85522

A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the createSlotImportJob function by manipulating the jobname argument. This can lead to a denial of service, making the affected system unavailable. Mitigation Restrict...

CVE-2026-86227

A flaw was found in Valkey. An out-of-bounds read vulnerability exists in the kvstoreGetHashtable function within src/kvstore.c. This issue can be exploited by a remote attacker in cluster mode by providing a specially crafted dump.rdb file during application startup, for example, through data...

Astra Linux – Vulnerability in Redis

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user could use scripting commands to inject arbitrary information into the response stream for a given client, potentially corrupting or returning tampered data to other users on the same...

Astra Linux – Vulnerability in Redis

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port could send an invalid packet, causing an out-of-bound read operation, which might lead to the system crashing. The Valkey clusterbus packet...

CLEANSTART-2026-TY09591 Security fix for GHSA-fq2f-crmw-q97r applied in: valkey 9.1.2-r0

Security vulnerability affects the valkey package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZR73377 Security fix for GHSA-jcj7-v34w-v9vv applied in: valkey 9.1.2-r0

Security vulnerability affects the valkey package. This issue is resolved in later releases. See references for vulnerability details...

valkey-9.1.2-3.1 on GA media (moderate)

valkey-9.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11951-1 Rating: moderate Cross-References: CVE-2026-92925 CVSS scores: CVE-2026-92925 SUSE : 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2026-92925 SUSE : 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4493-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4493-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4491-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

SUSE SLES16 Security Update : valkey (SUSE-SU-2026:23986-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23986-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

Security update for valkey

This update for valkey fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4493-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

Security update for valkey

This update for valkey fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4491-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

openSUSE 16 Security Update : valkey (openSUSE-SU-2026:21985-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21985-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the...

OPENSUSE-SU-2026:11951-1 valkey-9.1.2-3.1 on GA media

These are all security issues fixed in the valkey-9.1.2-3.1 package on the GA media of openSUSE Tumbleweed...

Rocky Linux 10.1 [CIQ] Security Update: valkey / valkey-debuginfo / valkey-debugsource / valkey-devel Multiple Vulnerabilities (crlsa-2025_21936)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521936 advisory. redis: Lua library commands may lead to integer overflow and potential RCE CVE-2025-46817 Redis: Redis: Authenticated users can execute LUA scripts as ...