Skip to content
OpenAdvisories

Package · Debian

celery

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2021-23727

    Stored Command Injection

    This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manip…

    celery celery celery Debian Ubuntu PyPI
  • Medium —
    CVE-2011-4356

    Celery local privilege escalation vulnerability

    Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gai…

    celery celery Debian PyPI