Valkey 7.2.11 is available on Memetria’s 7.2 branch.

This security release fixes four Lua scripting vulnerabilities: CVE-2025-49844, CVE-2025-46817, CVE-2025-46818, and CVE-2025-46819. These include potential remote code execution, execution in another user’s context, and an out-of-bounds read.

The release also fixes a crash involving empty Lua error tables and corrects client-tracking memory accounting.