Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I’d imagine recent uptick in using services like Upstash may make it harder for people to know if they are vulnerable or not. Is this mitigated by disabling Lua script execution?


Upstash wouldn’t be vulnerable - Upstash doesn’t run upstream redis, it’s a protocol-compatible proprietary implementation.


I would guess it is.

Also:

> Exploitation of this vulnerability requires an attacker to first gain authenticated access to your Redis instance.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: