PYSEC-2022-43162 incorrectly applied to redis-py

[mloshakov]

This vulnerability applies to https://github.com/redis/redis not https://github.com/redis/redis-py

Python package does not have that vulnerability

advisory-database/vulns/redis/PYSEC-2022-43162.yaml

Line 1 in c9b8e1f

id: PYSEC-2022-43162

Should be removed

[sethmlarson]

We're aware of the recent large import with false-positives. I'm sorting through them to see if we can withdraw them or update the affected version ranges based on info from other vulnerability databases.

[mloshakov]

pip-audit still reports redis-py vulnerability

> pip-audit -r <(poetry export -f requirements.txt --with dev)
Warning: poetry-plugin-export will not be installed by default in a future version of Poetry.
In order to avoid a breaking change and make your automation forward-compatible, please install poetry-plugin-export explicitly. See https://python-poetry.org/docs/plugins/#using-plugins for details on how to install a plugin.
To disable this warning run 'poetry config warnings.export false'.
Found 1 known vulnerability in 1 package
Name  Version ID               Fix Versions
----- ------- ---------------- ------------
redis 5.2.0   PYSEC-2022-43162