7.2.12

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Security fixes

• (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (https://github.com/valkey-io/valkey/pull/3249)
• (CVE-2025-67733) RESP Protocol Injection via Lua error_reply (https://github.com/valkey-io/valkey/pull/3249)

Bug fixes

• Fix ltrim should not call signalModifiedKey when no elements are removed (#2787)
• Fix potential infinite loop in clusterNodeGetMaster (#2830)
• Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand (#3160)

Full changelog: https://github.com/valkey-io/valkey/compare/7.2.11...7.2.12