Lucene search
+L

5504 matches found

Cvelist
Cvelist
added 2026/01/08 9:50 a.m.49 views

CVE-2026-21874 NiceGUI has Redis connection leak via tab storage causes service degradation

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation wh...

5.3CVSS0.0053EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/08 9:50 a.m.30 views

CVE-2026-21874

CVE-2026-21874 affects NiceGUI versions 2.10.0 through 3.4.1 where an unauthenticated attacker can exhaust Redis connections by repeatedly opening/closing browser tabs using Redis-backed storage. This tab-storage leak prevents Redis connections from being released, causing Redis to reach its max ...

5.3CVSS6.4AI score0.0053EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/01/08 9:50 a.m.9 views

CVE-2026-21874 NiceGUI has Redis connection leak via tab storage causes service degradation

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation wh...

5.3CVSS6.5AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/01/08 9:50 a.m.2 views

CVE-2026-21874 NiceGUI has Redis connection leak via tab storage causes service degradation

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed storage. Connections are never released, leading to service degradation wh...

5.3CVSS6.4AI score0.0053EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/08 12:00 a.m.14 views

PT-2026-2113

Name of the Vulnerable Software and Affected Versions NiceGUI versions 2.10.0 through 3.4.1 Description NiceGUI is a Python-based UI framework. An unauthenticated attacker can exhaust Redis connections by repeatedly opening and closing browser tabs on any NiceGUI application using Redis-backed...

5.3CVSS6.6AI score0.0053EPSS
SaveExploits1References13
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/07 2:08 a.m.8 views

Malicious code in redis-cookie-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509b8c9645600775859de8538bbca62aac7f273789f1b43a370c814e2a061acc The package redis-cookie-ts was found to contain malicious code. Source: ghsa-malware c3c52170c4adfaeed7862716007e61fcaa3cfc702c729b6487746c1f3184f3e...

6.9AI score
SaveExploits0References1
Snyk
Snyk
added 2026/01/07 2:08 a.m.7 views

Malicious Package

Overview redis-request-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSV
OSV
added 2026/01/07 2:08 a.m.6 views

MAL-2026-102 Malicious code in redis-cookie-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509b8c9645600775859de8538bbca62aac7f273789f1b43a370c814e2a061acc The package redis-cookie-ts was found to contain malicious code. Source: ghsa-malware c3c52170c4adfaeed7862716007e61fcaa3cfc702c729b6487746c1f3184f3e...

6.8AI score
SaveExploits0References1
EUVD
EUVD
added 2026/01/07 2:08 a.m.7 views

EUVD-2026-1379

Malicious code in redis-cookie-ts npm...

6.6AI score
SaveExploits0References1
Snyk
Snyk
added 2026/01/07 2:08 a.m.8 views

Malicious Package

Overview redis-cookie-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.19 views

CVE-2024-31227 vulnerabilities

Vulnerabilities for packages: redis...

4.4CVSS6.9AI score0.00398EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.7 views

CVE-2024-31228 vulnerabilities

Vulnerabilities for packages: redis...

6.5CVSS6.9AI score0.01011EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.14 views

CVE-2024-51741 vulnerabilities

Vulnerabilities for packages: redis...

4.4CVSS9.3AI score0.00305EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.14 views

CVE-2025-48367 vulnerabilities

Vulnerabilities for packages: redis...

7.5CVSS9.3AI score0.00769EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.41 views

CVE-2025-27151 vulnerabilities

Vulnerabilities for packages: redis...

9.8CVSS9.3AI score0.00954EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.8 views

CVE-2024-46981 vulnerabilities

Vulnerabilities for packages: redis...

9.8CVSS7.2AI score0.08169EPSS
SaveExploits2
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.8 views

CVE-2025-32023 vulnerabilities

Vulnerabilities for packages: redis...

7.8CVSS9.3AI score0.03935EPSS
SaveExploits4
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.18 views

CVE-2024-31449 vulnerabilities

Vulnerabilities for packages: redis...

8.8CVSS6.9AI score0.04495EPSS
SaveExploits1
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.5 views

CVE-2025-21605 vulnerabilities

Vulnerabilities for packages: redis...

7.5CVSS9.3AI score0.00853EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/01/07 1:30 a.m.7 views

CVE-2025-21605 vulnerabilities

Vulnerabilities for packages: redis...

7.5CVSS9.3AI score0.00853EPSS
SaveExploits0
Rows per page
Query Builder