Valkey Use-After-Free in Stream Deserialization Leading to RCE (CVE-2026-6339) Analysis and Fix
Security Advisory
GHSA-mvcj-73cw-22m4
High
Valkey
Affected:
- valkey-server <= 9.1.0
- valkey-server <= 9.0.4
- valkey-server <= 8.1.8
- valkey-server <= 8.0.9
- valkey-server <= 7.2.13
Fixed in:
- valkey-server 9.1.1
- valkey-server 9.0.5
- valkey-server 8.1.9
- valkey-server 8.0.10
- valkey-server 7.2.14
Referenced CVEs:
CVE-2026-63639 · 8.8
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.