https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T22:33:45.358240+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-17495 CVE-2020-17495 2026-10-16T22:33:45.389458+00:00

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.

 https://cve.radiocsirt.org/vuln/ghsa-fvx8-v524-8579 GHSA-fvx8-v524-8579 — django-celery-results Stores Sensitive Information In Cleartext 2026-10-16T22:33:45.389513+00:00

Affected: PyPI: django-celery-results

django-celery-results prior to 2.4.0 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.

In version 2.4.0 this is no longer the default behaviour but can be re-enabled with the `result_extended` flag in which case care should be taken to ensure any sensitive variables are scrubbed - see [here](https://github.com/celery/django-celery-results/issues/154#issuecomment-734706270) for an example.