Lucene search
+L

6817 matches found

Vulnrichment
Vulnrichment
•added 2026/01/08 9:50 a.m.•2 views

CVE-2026-21874 NiceGUI has Redis connection leak via tab storage causes service degradation

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation wh...

5.3CVSS5.6AI score0.00554EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/01/08 9:50 a.m.•21 views

EUVD-2026-1474

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation wh...

5.3CVSS5.6AI score0.00554EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/08 9:50 a.m.•57 views

CVE-2026-21874 NiceGUI has Redis connection leak via tab storage causes service degradation

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation wh...

5.3CVSS0.00554EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/08 9:50 a.m.•46 views

CVE-2026-21874

CVE-2026-21874 affects NiceGUI versions 2.10.0 through 3.4.1 where an unauthenticated attacker can exhaust Redis connections by repeatedly opening/closing browser tabs using Redis-backed storage. This tab-storage leak prevents Redis connections from being released, causing Redis to reach its max ...

5.3CVSS5.6AI score0.00554EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2026/01/08 9:50 a.m.•14 views

CVE-2026-21874 NiceGUI has Redis connection leak via tab storage causes service degradation

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation wh...

5.3CVSS6.5AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•22 views

PT-2026-2113

Name of the Vulnerable Software and Affected Versions NiceGUI versions 2.10.0 through 3.4.1 Description NiceGUI is a Python-based UI framework. An unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed...

5.3CVSS5.8AI score0.00554EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•6 views

CVE-2026-21874: Missing Release of Resource after Effective Lifetime

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation wh...

5.3CVSS5.6AI score0.00554EPSS
SaveExploits1References1
Snyk
Snyk
•added 2026/01/07 2:08 a.m.•11 views

Malicious Package

Overview redis-request-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/07 2:08 a.m.•9 views

Malicious code in redis-cookie-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509b8c9645600775859de8538bbca62aac7f273789f1b43a370c814e2a061acc The package redis-cookie-ts was found to contain malicious code. Source: ghsa-malware c3c52170c4adfaeed7862716007e61fcaa3cfc702c729b6487746c1f3184f3e...

6.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/01/07 2:08 a.m.•9 views

EUVD-2026-1379

Malicious code in redis-cookie-ts npm...

6.6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/01/07 2:08 a.m.•8 views

MAL-2026-102 Malicious code in redis-cookie-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509b8c9645600775859de8538bbca62aac7f273789f1b43a370c814e2a061acc The package redis-cookie-ts was found to contain malicious code. Source: ghsa-malware c3c52170c4adfaeed7862716007e61fcaa3cfc702c729b6487746c1f3184f3e...

6.8AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/01/07 2:08 a.m.•14 views

Malicious Package

Overview redis-cookie-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•7 views

CVE-2025-21605 vulnerabilities

Vulnerabilities for packages: redis...

7.5CVSS6.8AI score0.00857EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•9 views

CVE-2024-46981 vulnerabilities

Vulnerabilities for packages: redis...

9.8CVSS6.6AI score0.08182EPSS
SaveExploits2
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•14 views

CVE-2025-32023 vulnerabilities

Vulnerabilities for packages: redis...

7.8CVSS6.2AI score0.06473EPSS
SaveExploits4
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•22 views

CVE-2025-48367 vulnerabilities

Vulnerabilities for packages: redis...

7.5CVSS7.3AI score0.01191EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•11 views

CVE-2024-31228 vulnerabilities

Vulnerabilities for packages: redis...

6.5CVSS6.8AI score0.01011EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•23 views

CVE-2024-31449 vulnerabilities

Vulnerabilities for packages: redis...

8.8CVSS6.6AI score0.04495EPSS
SaveExploits1
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•25 views

CVE-2024-31227 vulnerabilities

Vulnerabilities for packages: redis...

4.4CVSS6.5AI score0.00398EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/01/07 1:51 a.m.•17 views

CVE-2024-51741 vulnerabilities

Vulnerabilities for packages: redis...

4.4CVSS5.5AI score0.00303EPSS
SaveExploits0
Rows per page
Query Builder