https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T04:39:18.633034+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-iredis-cve-2023-28858 BREW-iredis-CVE-2023-28858 — redis-py Race Condition vulnerability 2026-10-10T04:39:18.635737+00:00

Affected: Homebrew: iredis

redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a pipeline operation), and can send response data to the client of an unrelated request in an off-by-one manner. The fixed versions for this CVE Record are 4.3.6, 4.4.3, and 4.5.3, but [are believed to be incomplete](https://github.com/redis/redis-py/issues/2665). CVE-2023-28859 has been assigned the issues caused by the incomplete fixes.

 https://cve.radiocsirt.org/vuln/cve-2023-28858 CVE-2023-28858 2026-10-10T04:39:18.635788+00:00

redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about addressing data leakage across AsyncIO connections in general.

 https://cve.radiocsirt.org/vuln/ghsa-24wv-mv5m-xv4h GHSA-24wv-mv5m-xv4h — redis-py Race Condition vulnerability 2026-10-10T04:39:18.635815+00:00

Affected: PyPI: redis

redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a pipeline operation), and can send response data to the client of an unrelated request in an off-by-one manner. The fixed versions for this CVE Record are 4.3.6, 4.4.3, and 4.5.3, but [are believed to be incomplete](https://github.com/redis/redis-py/issues/2665). CVE-2023-28859 has been assigned the issues caused by the incomplete fixes.