-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from incomplete cleanup during async command cancellation. The commit diff shows critical changes in client.py and cluster.py where asyncio.shield was added to protect against premature cancellation, and explicit CancelledError handling was implemented to disconnect lingering connections. These functions directly manage command execution lifecycle and were the focus of the patch, making them the clear vulnerable points.
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| redis | pip | >= 4.5.0, < 4.5.4 | 4.5.4 |
| redis | pip | >= 4.2.0, < 4.4.4 | 4.4.4 |
Ongoing coverage of React2Shell