Cross-request data disclosure via canceled pipeline commands

Race condition in redis-py 4.2.0 through 4.3.5, 4.4.0 through 4.4.2, and 4.5.0 through 4.5.2 allows remote attackers to read cross-request data. The Asyncio pipeline returns a canceled connection to the shared pool after sending a command but before consuming its response, shifting subsequent response reads by one. Exploitation requires cancellation during that timing window and reuse of the connection; disclosure is limited to the prior response left on that connection.