https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:18:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-01832 bdu:2023-01832 https://cve.radiocsirt.org/vuln/bdu:2023-01832 https://cve.radiocsirt.org/vuln/brew-iredis-cve-2023-28859 <p><strong>Affected:</strong> Homebrew: iredis</p> <p>redis-py through 4.5.3 and 4.4.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.</p> <p><strong>Affected:</strong> Homebrew: iredis</p> <p>redis-py through 4.5.3 and 4.4.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.</p> https://cve.radiocsirt.org/vuln/brew-iredis-cve-2023-28859 https://cve.radiocsirt.org/vuln/euvd-2026-218462 EUVD-2026-218462 https://cve.radiocsirt.org/vuln/euvd-2026-218462 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28859 <p>redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.</p> <p>redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28859 https://cve.radiocsirt.org/vuln/ghsa-8fww-64cx-x8p5 <p><strong>Affected:</strong> PyPI: redis</p> <p>redis-py through 4.5.3 and 4.4.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.</p> <p><strong>Affected:</strong> PyPI: redis</p> <p>redis-py through 4.5.3 and 4.4.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.</p> https://cve.radiocsirt.org/vuln/ghsa-8fww-64cx-x8p5 https://cve.radiocsirt.org/vuln/gsd-2023-28859 gsd-2023-28859 https://cve.radiocsirt.org/vuln/gsd-2023-28859 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12873-1 <p>python310-redis-4.5.4-1.1 on GA media</p> <p>python310-redis-4.5.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12873-1 https://cve.radiocsirt.org/vuln/pysec-2023-46 <p><strong>Affected:</strong> PyPI: redis</p> <p>redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.</p> <p><strong>Affected:</strong> PyPI: redis</p> <p>redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.</p> https://cve.radiocsirt.org/vuln/pysec-2023-46 https://cve.radiocsirt.org/vuln/suse-su-2024:1639-2 <p>Security update for python-arcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-jsondiff, python-knack, python-marshmallow, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-opentelemetry-sdk, python-opentelemetry-semantic-conventions, python-opentelemetry-test-utils, python-pycomposefile, python-pydash, python-redis, python-retrying, python-semver, python-sshtunnel, python-strictyaml, python-sure, python-vcrpy, python-xmltodict</p> <p>Security update for python-arcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-jsondiff, python-knack, python-marshmallow, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-opentelemetry-sdk, python-opentelemetry-semantic-conventions, python-opentelemetry-test-utils, python-pycomposefile, python-pydash, python-redis, python-retrying, python-semver, python-sshtunnel, python-strictyaml, python-sure, python-vcrpy, python-xmltodict</p> https://cve.radiocsirt.org/vuln/suse-su-2024:1639-2 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28859 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: python-redis, Ubuntu:25.10: python-redis, Ubuntu:26.04:LTS: python-redis</p> <p>redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: python-redis, Ubuntu:25.10: python-redis, Ubuntu:26.04:LTS: python-redis</p> <p>redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28859 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0772 <p>Ein Angreifer kann mehrere Schwachstellen in redis-py ausnutzen, um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in redis-py ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0772