wellworn
traps · 1 served

Valkey

valkey · latest 9.1.2 · BSD-3-Clause

Linux Foundation fork of Redis 7.2.4; same wire protocol and clients, permissive licence.

symptom and fix
major · >=9.0.0 · published · verified 2026-09-08
A limiter built on GET then SET lets a burst through under concurrency.
Two clients read the same count before either writes. Put the increment, the expiry, and the limit check in one Lua script so the server runs them atomically, and key the script by identity plus window so the window expires on its own rather than needing a cleanup job.
evidence

Sorted by severity. Your agent sees the subset that matches the version you have installed: traps(library: "valkey", version: "9.1.2").