{"action":"Upgrade celery to 2.2.8 or later.","affected":[{"fixed":"2.2.8","introduced":"2.1"},{"fixed":"2.3.4","introduced":"2.3"},{"fixed":"2.4.4","introduced":"2.4"}],"component":"celery","cve_ids":["CVE-2011-4356"],"ecosystem":"PyPI","epss":0.0033,"exploited":false,"fixed_versions":["2.2.8","2.3.4","2.4.4"],"ghsa_id":"GHSA-rpc6-h455-3rx5","id":"tcs_01M5KG5G63R7GJCG8R9Q96YRH4","modified_at":"2026-06-10T17:00:42.043242897Z","published_at":"2011-12-05T11:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2011-17","https://github.com/ask/celery/blob/master/docs/sec/CELERYSA-0001.txt","https://github.com/ask/celery/pull/544","http://secunia.com/advisories/46973","http://www.securityfocus.com/bid/50825","https://github.com/advisories/GHSA-rpc6-h455-3rx5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2011-17","url":"https://osv.dev/vulnerability/PYSEC-2011-17"}],"summary":"Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, c"}