Valkey 7 to 8

Valkey 8.1.10 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that

Valkey 8.0.11 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that

Valkey 8.1.9 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could al

Valkey 8.0.10 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could a

Upgrade urgency HIGH: There is a critical bug that may affect a subset of users. Bug fixes Fix ZDIFF algorithm 2 memory leak on early exit (#3342) Strictly check CRLF when parsing querybuf (#2872) Fix incorrect memory overhead calculation f

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-

Upgrade urgency SECURITY: This release supersedes 8.0.8 (revoked) and includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory

NOTICE: This release has been revoked. The 8.0.8 tag was placed on a commit that is not part of the 8.0 release branch. Users should upgrade to 8.0.9 instead.

Valkey 8.1.6 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (CVE-2025-67733) RESP Protocol Inje

Valkey 8.0.7 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (CVE-2025-67733) RESP Protocol Inje

Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent. Bug fixes Fix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#1826) Fix invalid memory address caused by hashtable shrinking during safe iteration (#

Valkey 8.1.4 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to

Valkey 8.0.6 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix clients remaining blocked when reprocessing commands after certain blocking operations (#2109) Fix a memory corruption

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix missing response when AUTH is errored inside a transaction (#2287) Security fixes CVE-2025-32023 prevent out-of-bounds

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes CVE-2025-32023 prevent out-of-bounds write during hyperloglog operations (#2146) CVE-2025-48367 retry accept on transi

Upgrade urgency HIGH: This release includes CVE fix for valkey-check-aof tool, we recommend you apply as soon as possible if you use the tool. Security fixes CVE-2025-27151 Check length of AOF file name in valkey-check-aof (#2146) Bug fixes

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-21605) Limit output buffer for unauthenticated clients (#1994) Bug fixes Fix the build on less common platfo

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-21605) Limit output buffer for unauthenticated clients (#1993) Bug fixes Optimize RDB load performance and f

Valkey 8.1 release notes Upgrade urgency levels: LOW: No need to upgrade unless there are new features you want to use. MODERATE: Program an upgrade of the server, but it's not urgent. HIGH: There is a critical bug that may affect a subset

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2024-46981) Lua script commands may lead to remote code execution. (#1513) (CVE-2024-51741) Denial-of-service due

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Fix a build issue with RDMA when using additional make parameters. (#1074) Fix an issue where CLUSTER SLOTS might return th

Upgrade urgency LOW: This is the first release of Valkey 8.0, which includes stability and performance improvements over the second release candidate. This release is fully compatible with Redis OSS 7.2.4. The 8.0.0 release also contains th