Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
The package provides redis-py, the pure-Python Redis client (github.com/redis/redis-py). CVE-2026-25588 is an invalid memory access / potential remote code execution flaw in the RedisTimeSeries module of the Redis server, reachable via the RESTORE command and patched in RedisTimeSeries 1.12.14. The flaw is in server-side C module code not present in the Python client, which only sends commands and parses replies. The detection is a CPE collision: redis-py 8.x aligns with the Redis 8.x server versioning and shares cpe:2.3:a:redis:redis with the server.
Status