StackRadar

CVE-2026-23631

High

Advisory

Published 5 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.028
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 17,781 indexed, latest versions
Container images
25
deployed by those charts
Fix available
6 of 6
affected packages

redis-server Lua use-after-free may allow remote code execution

Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 25 images.

Affected packageAffected versionsFixed inImages
redisbitnami7.2.1-0, 7.2.4-4, 7.2.4-5, 7.2.5-0+7 more7.2.1414
redisdeb5:5.0.7-2ubuntu0.1, 5:7.0.15-1~deb12u1, 5:7.0.15-1~deb12u4, 5:7.0.15-1~deb12u6+1 more5:7.0.15-1~deb12u86
valkeybitnami8.1.2-0, 8.1.3-07.2.134
Redis(R)bitnami7.2.4-5, 7.2.5-07.2.142
Redis (TM)bitnami7.2.1, 7.2.4-47.2.142
valkeyapk8.1.4-r08.1.7-r01
OSV records
ALPINE-CVE-2026-23631BIT-redis-2026-23631BIT-valkey-2026-23631DEBIAN-CVE-2026-23631UBUNTU-CVE-2026-23631
Also known as
BIT-keydb-2026-23631, GHSA-8ghh-qpmp-7826

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
7.2.13

Open the chart page →

8,811
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:latest5927ff3702df
redis@8.0.3-1
7.2.14

Open the chart page →

6,699
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
redis@7.2.4-4
Redis (TM)@7.2.4-4
7.2.14
7.2.14

Open the chart page →

19,391
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
redis@7.4.3-0
7.2.14

Open the chart page →

14,956
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
redis@8.2.1-0
7.2.14

Open the chart page →

5,896
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
redis@8.2.1-0
7.2.14

Open the chart page →

13,350
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
redis@7.2.5-0
Redis(R)@7.2.5-0
7.2.14
7.2.14

Open the chart page →

17,263
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
redis@8.2.1-0
7.2.14

Open the chart page →

10,428
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
redis@5:7.0.15-1~deb12u1
5:7.0.15-1~deb12u8

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
redis@7.2.4-5
Redis(R)@7.2.4-5
7.2.14
7.2.14

Open the chart page →

28,839
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
redis@8.2.1-0
7.2.14

Open the chart page →

10,530
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
redis@7.2.1-0
Redis (TM)@7.2.1
7.2.14
7.2.14

Open the chart page →

14,566
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
redis@7.4.2-1
7.2.14

Open the chart page →

15,863
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
redis@8.2.1-0
7.2.14

Open the chart page →

9,971
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:latest0384ca2eec63
valkey@8.1.2-0
7.2.13

Open the chart page →

52,635
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
redis@8.2.1-0
7.2.14

Open the chart page →

7,473
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
redis@8.0.3-1
7.2.14

Open the chart page →

40,238
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
redis@5:7.0.15-1~deb12u6
5:7.0.15-1~deb12u8

Open the chart page →

8,001
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
redis@7.4.3-0
7.2.14

Open the chart page →

20,900
rediscowboysysopVerified publisher21.2.61 of 1See more

redis cowboysysop 21.2.6

1 of the 1 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
redis@8.0.2-1
7.2.14

Open the chart page →

2,621
rommernail-romm1.0.11 of 1See more

romm ernail-romm 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
rommapp/romm:4.4.1b909e95d1aab
valkey@8.1.4-r0
8.1.7-r0

Open the chart page →

2,896
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
redis@5:5.0.7-2ubuntu0.1
no fix listed

Open the chart page →

20,933
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
redis@5:7.0.15-1~deb12u4
5:7.0.15-1~deb12u8

Open the chart page →

9,653
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
redis@5:7.0.15-1ubuntu0.24.04.1
no fix listed

Open the chart page →

8,967
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/redis:latest5927ff3702df
redis@8.0.3-1
7.2.14

Open the chart page →

14,801
valkeymesosphere-stable3.0.221 of 1See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
valkey@8.1.3-0
7.2.13

Open the chart page →

2,622
redispetersandor15.2.21 of 1See more

redis petersandor 15.2.2

1 of the 1 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnami/redis:7.4.24e65bf641805
redis@7.4.2-1
7.2.14

Open the chart page →

2,722
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r34f0191fba7d3
valkey@8.1.3-0
7.2.13

Open the chart page →

25,934
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
redis@7.4.1-1
7.2.14

Open the chart page →

4,178
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
redis@5:5.0.7-2ubuntu0.1
no fix listed

Open the chart page →

30,687
giteawenerme12.7.01 of 4See more

gitea wenerme 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
7.2.13

Open the chart page →

8,811
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-23631.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
redis@8.4.0-0
7.2.14

Open the chart page →

2,113

Container images carrying it

25 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
redis@8.2.1-0
7.2.14
6
bitnamilegacy/redis:latest5927ff3702df
redis@8.0.3-1
7.2.14
2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
7.2.13
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
redis@5:7.0.15-1~deb12u6
5:7.0.15-1~deb12u8
1
arunvelsriram/utils:latest655ad18fd8d6
redis@5:7.0.15-1ubuntu0.24.04.1
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
redis@5:7.0.15-1~deb12u1
5:7.0.15-1~deb12u8
1
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
redis@8.0.3-1
7.2.14
1
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
redis@7.2.5-0
Redis(R)@7.2.5-0
7.2.14
7.2.14
1
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
redis@7.4.2-1
7.2.14
1
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
redis@7.2.4-5
Redis(R)@7.2.4-5
7.2.14
7.2.14
1
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
redis@7.2.4-4
Redis (TM)@7.2.4-4
7.2.14
7.2.14
1
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
redis@8.0.2-1
7.2.14
1
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
redis@7.2.1-0
Redis (TM)@7.2.1
7.2.14
7.2.14
1
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
redis@7.4.3-0
7.2.14
1
bitnamilegacy/valkey:latest0384ca2eec63
valkey@8.1.2-0
7.2.13
1
bitnamilegacy/valkey:8.1.3-debian-12-r34f0191fba7d3
valkey@8.1.3-0
7.2.13
1
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
valkey@8.1.3-0
7.2.13
1
bitnami/redis:7.4.24e65bf641805
redis@7.4.2-1
7.2.14
1
middlewareeng/middleware:0.3.1747d880812f1
redis@5:7.0.15-1~deb12u4
5:7.0.15-1~deb12u8
1
rommapp/romm:4.4.1b909e95d1aab
valkey@8.1.4-r0
8.1.7-r0
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
redis@5:5.0.7-2ubuntu0.1
no fix listed
1
venturenox/redis:latest83b471c193ba
redis@7.4.1-1
7.2.14
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
redis@8.4.0-0
7.2.14
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
redis@5:5.0.7-2ubuntu0.1
no fix listed
1
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
redis@7.4.3-0
7.2.14
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.