Approved changes feed: RSS · Atom
cpe:2.3:a:nonebot:nonebot2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nonebot (854322b2-881a-50ee-8980-361904024fc0) |
|---|---|
| Product | Nonebot2 (c6781115-0a67-5fcf-8fb8-bcd498fa7ac5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21624 |
vulnerable | 2026-06-08 06:27:36.227473 |
Potential Information Leak in User-Constructed Message Templates in nonebot2
MEDIUM (5.7)
nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates. The identified vulnerability has been remedied in pull request #2509 and will be included in versions released from 2.2.0. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability. A temporary workaround involves filtering underscores before incorporating user input into the message template.
Published: 2024-02-09T22:16:49.974Z
Updated: 2024-08-01T22:27:35.692Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.