redis package vulnerabilities
Advisories affecting the redis package. A list cannot tell you whether your installed version is affected — the dependency check can.
2 vulnerabilities tracked.
Check which version you are running → — this page lists advisories for the package; only a version check can tell you whether you are affected.
- 7.1 redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and…
- 6.3 redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that redis is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other packages tracked here
pypdf filelock next langflow node-forge PyJWT github.com/labstack/echo/v4 vllm github.com/labstack/echo/v5 undici nltk virtualenv react-router adminneo-org/adminneo @highcharts/dashboards pyjwt authlib litellm GitPython highcharts langchain-core seroval @highcharts/grid-pro org.mariadb.jdbc:mariadb-java-client