{"action":"Upgrade redis to 4.4.4 or later.","affected":[{"fixed":"4.5.4","introduced":"4.5.0"},{"fixed":"4.4.4","introduced":"4.2.0"}],"component":"redis","cve_ids":["CVE-2023-28859"],"ecosystem":"PyPI","epss":0.01034,"exploited":false,"fixed_versions":["4.5.4","4.4.4"],"ghsa_id":"GHSA-8fww-64cx-x8p5","id":"tcs_01M5KF84NM9WCGK17EN951QD48","modified_at":"2024-10-25T21:53:20.660854Z","published_at":"2023-03-26T21:30:23Z","references":["https://osv.dev/vulnerability/GHSA-8fww-64cx-x8p5","https://nvd.nist.gov/vuln/detail/CVE-2023-28859","https://github.com/redis/redis-py/issues/2665","https://github.com/redis/redis-py/pull/1899","https://github.com/redis/redis-py/pull/2641","https://github.com/redis/redis-py/pull/2666","https://github.com/redis/redis-py/pull/2671","https://github.com/redis/redis-py/commit/66a4d6b2a493dd3a20cc299ab5fef3c14baad965","https://github.com/redis/redis-py/commit/b3c89acd0ffe8303649ad8207bc911b1d6a033eb","https://github.com/pypa/advisory-database/tree/main/vulns/redis/PYSEC-2023-46.yaml","https://github.com/redis/redis-py","https://github.com/redis/redis-py/releases/tag/v4.4.4","https://github.com/redis/redis-py/releases/tag/v4.5.4"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8fww-64cx-x8p5","url":"https://osv.dev/vulnerability/GHSA-8fww-64cx-x8p5"}],"summary":"redis-py Race Condition due to incomplete fix"}