valkey-io/valkey 9.0.7
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Valkey 9.0.7, an open-source Redis-compatible in-memory data store, was released on 26 October 2026 with a recommendation to upgrade promptly. The main security fix addresses a heap buffer overflow in cluster Pub/Sub message construction that could let an authenticated client run arbitrary code by publishing an oversized message.