{"action":"Upgrade redis to 4.3.6 or later.","affected":[{"fixed":"4.4.3","introduced":"4.4.0"},{"fixed":"4.5.3","introduced":"4.5.0"},{"fixed":"4.3.6","introduced":"4.2.0"}],"component":"redis","cve_ids":["CVE-2023-28858"],"ecosystem":"PyPI","epss":0.01018,"exploited":false,"fixed_versions":["4.4.3","4.5.3","4.3.6"],"ghsa_id":"GHSA-24wv-mv5m-xv4h","id":"tcs_01M5KERSC80RNFNHCTKP7VWT7D","modified_at":"2024-10-25T21:54:11.332865Z","published_at":"2023-03-26T21:30:23Z","references":["https://osv.dev/vulnerability/GHSA-24wv-mv5m-xv4h","https://nvd.nist.gov/vuln/detail/CVE-2023-28858","https://github.com/redis/redis-py/issues/2624","https://github.com/redis/redis-py/pull/2641","https://github.com/redis/redis-py/commit/d56baeb683fc1935cfa343fa2eeb0fa9bd955283","https://github.com/pypa/advisory-database/tree/main/vulns/redis/PYSEC-2023-45.yaml","https://github.com/redis/redis-py","https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6","https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3","https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3","https://github.com/redis/redis-py/releases/tag/v4.4.4","https://github.com/redis/redis-py/releases/tag/v4.5.4","https://openai.com/blog/march-20-chatgpt-outage"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-24wv-mv5m-xv4h","url":"https://osv.dev/vulnerability/GHSA-24wv-mv5m-xv4h"}],"summary":"redis-py Race Condition vulnerability"}