NoneBot 2.0.0 Release Candidate 4
Approved changes feed: RSS · Atom
cpe:2.3:a:nonebot:nonebot:2.0.0:rc4:*:*:*:*:*:*
part: a version: 2.0.0 update: rc4
| Vendor | Nonebot (854322b2-881a-50ee-8980-361904024fc0) |
|---|---|
| Product | Nonebot (d82bd666-5dc7-584b-b82c-c470c6777895) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nonebot/nonebot2 |
purl2cpe | 2026-06-01 10:18:17.413955 |
pkg:pypi/nonebot2 |
purl2cpe | 2026-06-01 10:18:17.413956 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21624 |
vulnerable | 2026-06-08 06:27:36.240170 |
Potential Information Leak in User-Constructed Message Templates in nonebot2
MEDIUM (5.7)
nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates. The identified vulnerability has been remedied in pull request #2509 and will be included in versions released from 2.2.0. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability. A temporary workaround involves filtering underscores before incorporating user input into the message template.
Published: 2024-02-09T22:16:49.974Z
Updated: 2024-08-01T22:27:35.692Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.