{"id":"CVE-2017-1000248","details":"Redis-store \u003c=v1.3.0 allows unsafe objects to be loaded from redis","aliases":["GHSA-2w67-526p-gm73"],"modified":"2026-07-08T11:49:04.174559Z","published":"2017-11-17T04:29:00.577Z","references":[{"type":"FIX","url":"https://github.com/redis-store/redis-store/commit/e0c1398d54a9661c8c70267c3a925ba6b192142e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/redis-store/redis-store","events":[{"introduced":"0"},{"last_affected":"54b220ebd544f4cf9eb03f369d86842c763f95f3"},{"fixed":"e0c1398d54a9661c8c70267c3a925ba6b192142e"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:redis-store:redis-store:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.3.0"}]}}],"versions":["v1.3.0","v1.2.0","v1.2.0.pre","v1.1.7","v1.1.6","v1.1.5","v1.1.4","v1.1.0.rc2","v1.1.0.rc","v1.0.0","v1.0.0.rc1","v1.0.0.beta5","v1.0.0.beta4","v1.0.0.beta3","v1.0.0.beta2","v1.0.0.beta1","v0.3.8","v0.3.7","v0.3.6","v0.3.5","v0.3.0","v0.2.0","v0.1.0","v0.0.3","v0.0.2","v0.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000248.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}