CVE-2023-28859

score

<0.1

cvss

6.5

epss

1.0%

published

2023-03-26

kev added

—

first seen

2026-10-21

redis-py before 4.4.4 and 4.5.x before 4.5.4 contain a connection management issue caused by not properly closing connections after canceling an async Redis command, letting response data be sent to unrelated clients, exploit requires specific timing conditions.