releases.shpreview

RCE via RESTORE patched; Cuckoo Filter data loss fixed

v8.4.5

July 23, 2026redisView original ↗
2 fixesThis release2 fixesBug fixesAI-tallied from the release notes

SECURITY: There are security fixes in the release.

Security fixes

  • Use-after-free when loading a stream consumer group via RESTORE may lead to Remote Code Execution
  • RedisBloom/RedisBloom#1039 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution

Bug fixes

Fetched July 23, 2026