pypi rediswrapper vulnerabilities

Latest pypi rediswrapper CVEs

Newest publication first

1. CVE-2019-17206 Uncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scripts

   Published 2019-10-05

   Critical·CVSS 9.8 EPSS 3.2%

   Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) before 0.3.0 allows attackers to execute arbitrary scripts.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.