Debian/celery: high 7.5
This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized.
Action: Upgrade celery to 5.2.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.3-1 | - |
Fixed versions
| 5.2.3-1 |
Sources
published · modified · JSON