Skip to content

Vendor

org.redisson vulnerabilities

1 published CVE affecting org.redisson, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.redisson alerts

Products

Latest org.redisson CVEs

Newest publication first

  1. CVE-2023-42809 Redisson unsafe deserialization vulnerability

    Published
    HighCVSS 8.8

    Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.