Lucene search

K

Redis-py Security Vulnerabilities

cve
cve

CVE-2023-28859

redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for...

6.5CVSS

5.1AI Score

0.001EPSS

2023-03-26 07:15 PM
79
cve
cve

CVE-2023-28858

redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6,...

3.7CVSS

5.1AI Score

0.001EPSS

2023-03-26 07:15 PM
97