Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Redis 7.2.1 can be tricked into running unwanted code
published 3 months ago
Summary
The Redis server version 7.2.1 may let an attacker send specially crafted data that causes the program to execute code it shouldn't. This could let an attacker take control of the Redis service or the underlying system. Upgrade to the latest Redis release to eliminate the risk.
What to do
- Update cleanstart redis to version 7.2.1-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | redis |
< 7.2.1-r0 Fix: upgrade to 7.2.1-r0
|
Original advisory text
Security fixes in redis 7.2.1-r0
Package redis version 7.2.1-r0 fixes 1 vulnerabilities: CVE-2023-41053
References
Timeline
Published30 Jul 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-FL06601 · OSV
Track software like this
Free during beta