Redis
Databases · products/redis.yaml · RSS
Latest 8.10.2 Sep 17, 2026
Lifecycle
| Branch | Latest | Released | End of life |
|---|---|---|---|
| 8.10 | 8.10.2 | Jul 29, 2026 | — · maintained |
| 8.8 | 8.8.3 | May 25, 2026 | — · maintained |
| 8.6 | 8.6.7 | Feb 11, 2026 | — · maintained |
| 8.4 | 8.4.7 | Nov 18, 2025 | — · maintained |
| 8.2 | 8.2.10 | Aug 4, 2025 | Sep 1, 2030 · maintained |
| 8.0 | 8.0.6 | May 2, 2025 | Dec 1, 2026 · maintained |
| 7.4 | 7.4.11 | Jul 29, 2024 | Dec 1, 2029 · maintained |
| 7.2 | 7.2.16 | Aug 15, 2023 | Dec 1, 2029 · maintained |
| 7.0 | 7.0.15 | Apr 27, 2022 | Jul 29, 2024 · ended |
| 6.2 | 6.2.24 | Feb 22, 2021 | Apr 1, 2027 · maintained |
| 6.0 | 6.0.20 | Apr 30, 2020 | May 31, 2022 · ended |
| 5.0 | 5.0.14 | Oct 17, 2018 | Apr 27, 2022 · ended |
Recent releases
security#15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed
security#15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new…
securityTimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload
security(CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write
securityOut-of-bounds access in TopK heap cleanup path (MOD-15410)
securityUse-after-free in the TLS pending-data list when a command closes another pending connection
security#15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed
security#15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new…
securityTimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload
security(CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write
securityOut-of-bounds access in TopK heap cleanup path (MOD-15410)
securityUse-after-free in the TLS pending-data list when a command closes another pending connection
securityRedisBloom/RedisBloom#1044 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution
security#15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed
security#15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new…
securityTimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload
security(CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write
securityOut-of-bounds access in TopK heap cleanup path (MOD-15410)
securityUse-after-free in the TLS pending-data list when a command closes another pending connection
securityA crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution
securityRedisBloom/RedisBloom#1046 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution
security(CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution
security(CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution
security(CVE-2026-23631) Lua Use-After-Free may lead to remote code execution
securityA user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply
Security advisories
7.5 CVE-2025-21605 Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client
3.1 CVE-2023-45145 Redis Unix-domain socket may be exposed with the wrong permissions for a short time window.