Is Redis 8.8.4 affected?

Oct 26, 2026 · Release notes ↗

Update

3 known vulnerabilities affect 8.8.4 (highest CVSS 6.1).

4 newer releases in its track, up to 8.10.3. What changed up to 8.10.3

Vulnerabilities affecting 8.8.4

6.1
CVE-2026-23631 Lua Use-After-Free may lead to remote code execution
4.7
CVE-2025-27151 redis-check-aof may lead to stack overflow and potential RCE
4.4
CVE-2024-51741 Denial-of-service due to malformed ACL selectors

Newer releases

8.10.3	Oct 26, 2026	8.8.4 → 8.10.3
8.10.2	Sep 17, 2026	8.8.4 → 8.10.2
8.10.1	Aug 17, 2026	8.8.4 → 8.10.1
8.10.0	Jul 29, 2026	8.8.4 → 8.10.0