redis-store deserializes untrusted data (GHSA-2w67-526p-gm73)
Published: 2017-12-06T16:41:25Z
Aliases: CVE-2017-1000248
Severity: CRITICAL · CWE: CWE-502

Redis-store prior to 1.4.0 allows unsafe objects to be loaded from redis

Affected packages:
package: ecosystem: RubyGems
name: redis-store
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.4.0