Valkey Bundle 9.0.1 - Released Tue 24 Feb 2026
Upgrade urgency SECURITY: This release includes security fixes we recommend you
apply as soon as possible.
Security fixes
- (CVE-2025-67733) RESP Protocol Injection via Lua error_reply
- (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
- (CVE-2026-27623) Reset request type after handling empty requests
- (CVE-2026-21864) Remote DoS from malformed RESTORE command
Key Changes
Check the Valkey 9.0.3, Valkey-JSON 1.0.2, Valkey-Bloom 1.0.1, and Valkey-Search 1.0.2 release notes to see all the changes for Valkey Bundle 9.0.1.
Core Components
- Base Debian Image: valkey/valkey:9.0.3-trixie
- Base Alpine Image: valkey/valkey:9.0.3-alpine
- valkey - 9.0.3
- valkey-json - 1.0.2
- valkey-bloom - 1.0.1
- valkey-search - 1.0.2
- valkey-ldap - 1.0.0
Supported Tags and Platforms
Supported Debian Tags:
- 9.0.1
- 9.0
- 9
- latest
- 9.0.1-trixie
- 9.0-trixie
- 9-trixie
Supported Alpine Tags:
- 9.0.1-alpine
- 9.0-alpine
- 9-alpine
- alpine
Platform Support:
- linux/amd64
- linux/arm64
Full Changelog: 9.0.0...9.0.1