MAL-2026-12025 Malicious code in @keyv/valkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c74b9b7cab0e47c6f19a96a7ea44fd6d7c23989e4abdab3e708de9d6084d7f The package is a Keyv storage adapter for Valkey. No install-time lifecycle scripts, credential access, network exfiltration, dropper behavior,...

PT-2026-65088

Name of the Vulnerable Software and Affected Versions Valkey versions prior to 7.2.14 Valkey versions prior to 8.0.10 Valkey versions prior to 8.1.9 Valkey versions prior to 9.0.5 Valkey versions prior to 9.1.1 Description The RESTORE command accepts a malformed RDB stream payload that assigns on...

OPENSUSE-SU-2026:11381-1 valkey-9.1.1-1.1 on GA media

These are all security issues fixed in the valkey-9.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 10 : valkey (ELSA-2026-25216)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25216 advisory. 8.0.9-1 - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 Tenable has extracted the preceding description block directly from the...

CVE-2026-23479 affecting package valkey for versions less than 8.0.9-1

CVE-2026-23479 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...

CVE-2026-23631 affecting package valkey for versions less than 8.0.9-1

CVE-2026-23631 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...

PT-2026-38901

These are all security issues fixed in the valkey-9.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

Debian: Security Advisory (DSA-6198-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-1d05f1d152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-8d275f4438)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLEANSTART-2026-AY29369 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the valkey package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...

CLEANSTART-2026-CQ83284 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the valkey package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...

CLEANSTART-2026-YP32652 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the valkey package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...

CLEANSTART-2026-BZ70876 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the valkey package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...

openSUSE Security Advisory (SUSE-SU-2026:0685-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-67733 affecting package valkey for versions less than 8.0.7-1

CVE-2025-67733 affecting package valkey for versions less than 8.0.7-1. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2026:10266-1 valkey-9.0.3-1.1 on GA media

These are all security issues fixed in the valkey-9.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE: Security Advisory (SUSE-SU-2026:20022-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 10 : valkey (ELSA-2025-19675)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19675 advisory. - Fix for CVE-2025-49844 Orabug: 38515582 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Fedora: Security Advisory (FEDORA-2025-fd6619a49f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...