Skip to content

redis

v6.2.22 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 29d Caching
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

cache database distributed-systems in-memory in-memory-database json
+11 more
key-value key-value-store messaging no-sql nosql real-time realtime redis time-series vector-databases vector-db

Summary

AI summary

CVE-2026-25243 — invalid memory access in RESTORE may lead to Remote Code Execution

Full changelog

Update urgency: SECURITY: There is a security fix in the release.

Security fixes

  • (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution

Bug fixes

  • SUBSCRIBE, PSUBSCRIBE, SSUBSCRIBE: crash on OOM (RED-167788)
  • SCRIPT DEBUG: potential crash on scripts (RED-175507)

Security Fixes

  • CVE-2026-25243 — invalid memory access in RESTORE may lead to Remote Code Execution

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track redis

Get notified when new releases ship.

Sign up free

About redis

For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.

All releases →

Related context

Related tools

Beta — feedback welcome: [email protected]