Known Vulnerabilities for Redis-py by Redis
Listed below are 2 of the newest known vulnerabilities associated with "Redis-py" by "Redis".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-48847 json | Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/mem... | Not Provided | 2026-05-25 | 2026-05-26 |
| CVE-2026-48172 json | LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May... | Not Provided | 2026-05-21 | 2026-05-26 |
| CVE-2026-46424 json | Budibase is an open-source low-code platform. Prior to 3.38.2, the public API role unassignment endpoint (POST /api/public/v1... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2026-45679 json | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0,... | Not Provided | 2026-06-02 | 2026-06-02 |
| CVE-2026-44552 json | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the tool_s... | Not Provided | 2026-05-15 | 2026-05-15 |
| CVE-2026-42865 json | Inbox Zero is an AI personal assistant for email. Prior to 2.29.3, the cleaner email stream endpoint used a shared Redis subs... | Not Provided | 2026-05-11 | 2026-05-11 |
| CVE-2026-42586 json | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redi... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-42472 json | Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on... | Not Provided | 2026-05-01 | 2026-05-01 |
| CVE-2026-42088 json | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior... | Not Provided | 2026-05-04 | 2026-05-04 |
| CVE-2026-40872 json | mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the admin dashboa... | Not Provided | 2026-04-21 | 2026-04-22 |