AIKIDO-2025-10840

TL;DR

Affected versions of this package have a vulnerability that leads to Information Disclosure, allowing Redis credentials to be logged without redaction. If an attacker gains access to these application logs, either through a logging console or a log file, they could easily extract the Redis password. With these credentials, the attacker could gain unauthorized access to the Redis database, which might lead to data theft, modification, or deletion.