https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:19:16.508101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01832 bdu:2023-01832 2026-10-09T15:19:16.567715+00:00 bdu:2023-01832 https://cve.radiocsirt.org/vuln/brew-iredis-cve-2023-28859 BREW-iredis-CVE-2023-28859 — redis-py Race Condition due to incomplete fix 2026-10-09T15:19:16.567773+00:00

Affected: Homebrew: iredis

redis-py through 4.5.3 and 4.4.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.

 https://cve.radiocsirt.org/vuln/euvd-2026-218462 EUVD-2026-218462 2026-10-09T15:19:16.567822+00:00 EUVD-2026-218462 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28859 fkie_cve-2023-28859 2026-10-09T15:19:16.567880+00:00

redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.

 https://cve.radiocsirt.org/vuln/ghsa-8fww-64cx-x8p5 GHSA-8fww-64cx-x8p5 — redis-py Race Condition due to incomplete fix 2026-10-09T15:19:16.567915+00:00

Affected: PyPI: redis

redis-py through 4.5.3 and 4.4.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.

 https://cve.radiocsirt.org/vuln/gsd-2023-28859 gsd-2023-28859 2026-10-09T15:19:16.567947+00:00 gsd-2023-28859 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12873-1 openSUSE-SU-2024:12873-1 — python310-redis-4.5.4-1.1 on GA media 2026-10-09T15:19:16.567965+00:00

python310-redis-4.5.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-46 PYSEC-2023-46 2026-10-09T15:19:16.567993+00:00

Affected: PyPI: redis

redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.

 https://cve.radiocsirt.org/vuln/suse-su-2024:1639-2 SUSE-SU-2024:1639-2 — Security update for python-arcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, pyth… 2026-10-09T15:19:16.568058+00:00

Security update for python-arcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-jsondiff, python-knack, python-marshmallow, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-opentelemetry-sdk, python-opentelemetry-semantic-conventions, python-opentelemetry-test-utils, python-pycomposefile, python-pydash, python-redis, python-retrying, python-semver, python-sshtunnel, python-strictyaml, python-sure, python-vcrpy, python-xmltodict

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28859 UBUNTU-CVE-2023-28859 2026-10-09T15:19:16.568094+00:00

Affected: Ubuntu:24.04:LTS: python-redis, Ubuntu:25.10: python-redis, Ubuntu:26.04:LTS: python-redis

redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0772 WID-SEC-W-2023-0772 — redis-py: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2026-10-09T15:19:16.568128+00:00

Ein Angreifer kann mehrere Schwachstellen in redis-py ausnutzen, um Informationen offenzulegen.