Issues

• add keydb_version to info for product identification

  Snapchat/KeyDB#981 · Filter by author pairbit opened on Sep 2, 2026

• Use-after-free: KeyDB does not remove module cluster message receivers on MODULE UNLOAD

  Snapchat/KeyDB#980 · Filter by author entropy1337 opened on Aug 28, 2026

• Global-buffer-overflow in KeyDB module cluster message receivers

  Snapchat/KeyDB#979 · Filter by author entropy1337 opened on Aug 28, 2026

• Use-after-free in KeyDB RM_RegisterClusterMessageReceiver head-node delete — KeyDB

  Snapchat/KeyDB#978 · Filter by author entropy1337 opened on Aug 28, 2026

• Project status

  Snapchat/KeyDB#977 · Filter by author listepo opened on Jul 25, 2026
  2

• [BUG] Off-by-one global buffer overflow in RM_RegisterClusterMessageReceiver

  Snapchat/KeyDB#975 · Filter by author BreakingBad6 opened on Jun 7, 2026
  3

• [Security] Two unsynced Redis silent security fixes affecting KeyDB

  Snapchat/KeyDB#974 · Filter by author dkgkdfg65 opened on May 18, 2026
  1

• [Security] KeyDB: invalid memory access in RESTORE with malformed zipmap (CVE-2026-25243)

  Snapchat/KeyDB#973 · Filter by author vulgraph opened on May 18, 2026

• [BUG] maxmemory eviction fails under large dataset, memory usage exceeds maxmemory and keeps growing until OOM

  Snapchat/KeyDB#972 · Filter by author terryshi96 opened on Apr 13, 2026
  1

• [Security] CVE-2022-3647: Crash in sigsegvHandler (disputed)

  Snapchat/KeyDB#971 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2020-4670: Default configuration lacks authentication

  Snapchat/KeyDB#970 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2025-46819: Lua OOB read / crash

  Snapchat/KeyDB#969 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2025-46818: Lua function privilege escalation

  Snapchat/KeyDB#968 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2025-46817: Lua integer overflow

  Snapchat/KeyDB#967 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2025-46686: Multi-bulk memory consumption DoS

  Snapchat/KeyDB#966 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2025-48367: Accept retry loop DoS

  Snapchat/KeyDB#965 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2024-46981: Lua GC manipulation leading to use-after-free

  Snapchat/KeyDB#964 · Filter by author vulgraph opened on Apr 11, 2026
  1

• [Security] CVE-2025-32023: HyperLogLog OOB write

  Snapchat/KeyDB#963 · Filter by author vulgraph opened on Apr 11, 2026
  1

• [Security] CVE-2025-49844: Use-After-Free in Lua parser (luaY_parser)

  Snapchat/KeyDB#962 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2025-21605: Unauthenticated output buffer DoS (memory exhaustion)

  Snapchat/KeyDB#961 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2023-28856: HINCRBYFLOAT produces invalid ziplist values

  Snapchat/KeyDB#960 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2022-24834: cjson heap overflow via unlimited decode depth

  Snapchat/KeyDB#959 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2022-24735: Lua sandbox escape via loadstring()

  Snapchat/KeyDB#958 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2024-31228: DoS via pattern matching recursion crashes server

  Snapchat/KeyDB#957 · Filter by author vulgraph opened on Apr 11, 2026

• [Security] CVE-2024-31449: Stack buffer overflow in Lua bit.tohex() crashes server

  Snapchat/KeyDB#956 · Filter by author vulgraph opened on Apr 11, 2026