Skip to content

Product

celeryproject celery vulnerabilities

2 published CVES affecting celeryproject celery, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest celeryproject celery CVEs

Newest publication first

  1. CVE-2021-23727 Stored Command Injection

    Published
    HighCVSS 7.5 EPSS 3.6%

    This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata wi...

  2. CVE-2011-4356 Celery local privilege escalation vulnerability

    Published
    MediumCVSS 6.9 EPSS 0.33%

    Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vect...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.