Valkey changelog

Valkey 8.1.10 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that

Valkey 8.0.11 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that

Valkey 8.1.9 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could al

Valkey 8.0.10 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could a

Upgrade urgency HIGH: There is a critical bug that may affect a subset of users. Bug fixes Fix ZDIFF algorithm 2 memory leak on early exit (#3342) Strictly check CRLF when parsing querybuf (#2872) Fix incorrect memory overhead calculation f

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-

Upgrade urgency SECURITY: This release supersedes 8.0.8 (revoked) and includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory

NOTICE: This release has been revoked. The 8.0.8 tag was placed on a commit that is not part of the 8.0 release branch. Users should upgrade to 8.0.9 instead.

Valkey 8.1.6 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (CVE-2025-67733) RESP Protocol Inje

Valkey 8.0.7 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (CVE-2025-67733) RESP Protocol Inje

Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent. Bug fixes Fix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#1826) Fix invalid memory address caused by hashtable shrinking during safe iteration (#

Valkey 8.1.4 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to

Valkey 8.0.6 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix clients remaining blocked when reprocessing commands after certain blocking operations (#2109) Fix a memory corruption

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix missing response when AUTH is errored inside a transaction (#2287) Security fixes CVE-2025-32023 prevent out-of-bounds

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes CVE-2025-32023 prevent out-of-bounds write during hyperloglog operations (#2146) CVE-2025-48367 retry accept on transi

Upgrade urgency HIGH: This release includes CVE fix for valkey-check-aof tool, we recommend you apply as soon as possible if you use the tool. Security fixes CVE-2025-27151 Check length of AOF file name in valkey-check-aof (#2146) Bug fixes

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-21605) Limit output buffer for unauthenticated clients (#1994) Bug fixes Fix the build on less common platfo

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-21605) Limit output buffer for unauthenticated clients (#1993) Bug fixes Optimize RDB load performance and f

Valkey 8.1 release notes Upgrade urgency levels: LOW: No need to upgrade unless there are new features you want to use. MODERATE: Program an upgrade of the server, but it's not urgent. HIGH: There is a critical bug that may affect a subset

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2024-46981) Lua script commands may lead to remote code execution. (#1513) (CVE-2024-51741) Denial-of-service due

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix a build issue with RDMA when using additional make parameters. (#1074) Fix an issue where CLUSTER SLOTS might return th

Upgrade urgency LOW: This is the first release of Valkey 8.0, which includes stability and performance improvements over the second release candidate. This release is fully compatible with Redis OSS 7.2.4. The 8.0.0 release also contains th

Valkey 7.2.14 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could a

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (https://github.com/valkey-io/valkey/pull/3249)

Valkey 7.2.11 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead t

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix a bug that allowed clients to process commands when the server has paused command processing (#2231) Fix a crash when a

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-21605) Limit output buffer for unauthenticated clients (#1992) Bug fixes Fix defrag crash when using FLUSHDB

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2024-46981) Lua script commands may lead to remote code execution. (#1513) (CVE-2024-51741) Denial-of-service due

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Prevented AOF from being incorrectly disabled after loading RDB data, ensuring proper re-enabling of AOF. (#1001) Resolved

Upgrade urgency MODERATE: This release fixes an incompatibility issue with modules compiled for Redis. For other users, it primarily fixes uncommon bugs. Bug Fixes - Core Fix typo in REGISTER_API macro to prevent segfaults when loading Redi

Upgrade urgency LOW: This is the first stable release of Valkey 7.2.5. Changes to support Valkey branding Update template config files to remove references of redis.io and replace them with valkey.io. (#320)