Most recent entries from all

bdu:2025-09066

EUVD-2026-243573

fkie_cve-2025-48493

The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and password. That might be an issue if attacker has access to logs. Version 2.0.20 fixes the issue.

GHSA-g3p6-82vc-43jh — Yii 2 Redis may expose AUTH parameters in logs in case of connection failure

Affected: Packagist: yiisoft/yii2-redis

### Impact

On failing connection extension writes commands sequence to logs. AUTH parameters are written in plain text exposing username and password. That might be an issue if attacker has access to logs.