Redis 8.10.0 → 8.10.3

Breaking changes

None in the release notes.

Security changes

• security Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode in 8.10.3
• security #15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed in 8.10.2
• security #15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new… in 8.10.2
• security TimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload in 8.10.2
• security RedisSearch: KNN queries on indexes with very long vector field names could cause the server to crash in 8.10.2
• security Vector Sets: Deeply nested JSON used in Vector Set queries could cause the server to crash in 8.10.2
• security (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write in 8.10.1
• security Out-of-bounds access in TopK heap cleanup path (MOD-15410) in 8.10.1
• security Use-after-free in the TLS pending-data list when a command closes another pending connection in 8.10.1
• security A malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution in 8.10.1
• security Vector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access in 8.10.1
• security Vector Sets: use-after-free when VREM mutates the HNSW graph while background VSIM threads are still running in 8.10.1
• security Vector Sets: a negative hnsw_search() return was treated as a huge unsigned count, reading past the end of the result arrays in 8.10.1
• security TLS client certificate authentication bypass: a Common Name containing an embedded NUL byte was truncated, allowing a client to authenticate as another (possibly privileged) ACL user in 8.10.1
• security #15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key in 8.10.1

Every release in between