Fixing a CVE in Redis-py - Open Source Bug Hunting and Security Vulnerability Resolution
PyCon Israel via YouTube
Overview
Watch a 35-minute PyCon Israel conference talk exploring a critical vulnerability discovered in redis-py, a Python library with nearly 30 million monthly downloads. Learn about the data leakage bug that impacted major AI frameworks, following the journey from discovery through resolution. Gain practical insights into debugging library issues, implementing and testing fixes, and navigating security vulnerabilities in open source projects. Understand the delicate balance of addressing critical bugs while working transparently with open source communities. Examine real code examples and processes used to resolve this specific CVE (Common Vulnerabilities and Exposures), with all discussed code available in public repositories.
Syllabus
Chayim Kirshen- Fixing a CVE In the Open: redis-py, chatgpt, and open source bug hunting
Taught by
PyCon Israel