Is Redis 7.0.1 affected?

CVSS 7.4

10 known vulnerabilities affect 7.0.1 (highest CVSS 7.4).

Your branch 7.0 has reached end of life (Jul 29, 2024).

91 newer releases in its track, up to 8.10.3. What changed up to 8.10.3

Vulnerabilities affecting 7.0.1

7.4
CVE-2023-36824 Heap overflow in COMMAND GETKEYS and ACL evaluation fixed in 7.0.12
7.0
CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE fixed in 7.2.0
7.0
CVE-2022-35951 Heap overflow in Redis 7.0 XAUTOCLAIM command's COUNT argument. fixed in 7.0.5
7.0
CVE-2022-31144 Potential heap overflow in Redis 7.0 XAUTOCLAIM command. fixed in 7.0.4
6.1
CVE-2026-23631 Lua Use-After-Free may lead to remote code execution
5.5
CVE-2024-31228 Denial-of-service due to unbounded pattern matching fixed in 7.2.0
4.7
CVE-2025-27151 redis-check-aof may lead to stack overflow and potential RCE
4.4
CVE-2024-51741 Denial-of-service due to malformed ACL selectors
4.4
CVE-2024-31227 Denial-of-service due to malformed ACL selectors fixed in 7.2.6
3.1
CVE-2023-45145 Redis Unix-domain socket may be exposed with the wrong permissions for a short time window. fixed in 7.0.14