PYSEC-2023-46

redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time in the case of a non-pipeline operation, and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858...

PYSEC-2023-46

redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time in the case of a non-pipeline operation, and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete fix for CVE-2023-28858...

PT-2023-2098 · Pypi +2 · Redis-Py +2

Name of the Vulnerable Software and Affected Versions: redis-py versions 4.4.0 through 4.4.3 redis-py versions 4.5.0 through 4.5.3 Description: The issue is related to the redis-py library for Python, which is associated with a lack of protection for service data. This could allow a remote attack...