Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-tyaj-tzft-2ba8
SummaryRed Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to perform destructive actions and/or access sensitive information. As a workaround, unloading the Trivia module with `unload streams` can render this exploit not accessible. It is highly recommended updating to 3.3.12 or 3.4 to completely patch this issue.
Aliases
0
alias CVE-2020-15147
1
alias GHSA-7257-96vg-qf6x
2
alias PYSEC-2020-266
Fixed_packages
0
url pkg:pypi/red-discordbot@3.3.12
purl pkg:pypi/red-discordbot@3.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.12
Affected_packages
0
url pkg:pypi/red-discordbot@3.0.0b16
purl pkg:pypi/red-discordbot@3.0.0b16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b16
1
url pkg:pypi/red-discordbot@3.0.0b17
purl pkg:pypi/red-discordbot@3.0.0b17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b17
2
url pkg:pypi/red-discordbot@3.0.0b18
purl pkg:pypi/red-discordbot@3.0.0b18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b18
3
url pkg:pypi/red-discordbot@3.0.0b19
purl pkg:pypi/red-discordbot@3.0.0b19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b19
4
url pkg:pypi/red-discordbot@3.0.0b20
purl pkg:pypi/red-discordbot@3.0.0b20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b20
5
url pkg:pypi/red-discordbot@3.0.0b21
purl pkg:pypi/red-discordbot@3.0.0b21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b21
6
url pkg:pypi/red-discordbot@3.0.0rc1
purl pkg:pypi/red-discordbot@3.0.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc1
7
url pkg:pypi/red-discordbot@3.0.0rc1.post1
purl pkg:pypi/red-discordbot@3.0.0rc1.post1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc1.post1
8
url pkg:pypi/red-discordbot@3.0.0rc2
purl pkg:pypi/red-discordbot@3.0.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc2
9
url pkg:pypi/red-discordbot@3.0.0rc3
purl pkg:pypi/red-discordbot@3.0.0rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc3
10
url pkg:pypi/red-discordbot@3.0.0rc3.post1
purl pkg:pypi/red-discordbot@3.0.0rc3.post1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc3.post1
11
url pkg:pypi/red-discordbot@3.0.0
purl pkg:pypi/red-discordbot@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0
12
url pkg:pypi/red-discordbot@3.0.1
purl pkg:pypi/red-discordbot@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.1
13
url pkg:pypi/red-discordbot@3.0.2
purl pkg:pypi/red-discordbot@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.2
14
url pkg:pypi/red-discordbot@3.1.0
purl pkg:pypi/red-discordbot@3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.0
15
url pkg:pypi/red-discordbot@3.1.1
purl pkg:pypi/red-discordbot@3.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.1
16
url pkg:pypi/red-discordbot@3.1.2
purl pkg:pypi/red-discordbot@3.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.2
17
url pkg:pypi/red-discordbot@3.1.3
purl pkg:pypi/red-discordbot@3.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.3
18
url pkg:pypi/red-discordbot@3.1.4
purl pkg:pypi/red-discordbot@3.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.4
19
url pkg:pypi/red-discordbot@3.1.5
purl pkg:pypi/red-discordbot@3.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.5
20
url pkg:pypi/red-discordbot@3.1.6
purl pkg:pypi/red-discordbot@3.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.6
21
url pkg:pypi/red-discordbot@3.1.7
purl pkg:pypi/red-discordbot@3.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.7
22
url pkg:pypi/red-discordbot@3.1.8
purl pkg:pypi/red-discordbot@3.1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.8
23
url pkg:pypi/red-discordbot@3.1.9
purl pkg:pypi/red-discordbot@3.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.9
24
url pkg:pypi/red-discordbot@3.2.0
purl pkg:pypi/red-discordbot@3.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.2.0
25
url pkg:pypi/red-discordbot@3.2.1
purl pkg:pypi/red-discordbot@3.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.2.1
26
url pkg:pypi/red-discordbot@3.2.2
purl pkg:pypi/red-discordbot@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.2.2
27
url pkg:pypi/red-discordbot@3.2.3
purl pkg:pypi/red-discordbot@3.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.2.3
28
url pkg:pypi/red-discordbot@3.3.0
purl pkg:pypi/red-discordbot@3.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.0
29
url pkg:pypi/red-discordbot@3.3.1
purl pkg:pypi/red-discordbot@3.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.1
30
url pkg:pypi/red-discordbot@3.3.2
purl pkg:pypi/red-discordbot@3.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.2
31
url pkg:pypi/red-discordbot@3.3.3
purl pkg:pypi/red-discordbot@3.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.3
32
url pkg:pypi/red-discordbot@3.3.4
purl pkg:pypi/red-discordbot@3.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.4
33
url pkg:pypi/red-discordbot@3.3.5
purl pkg:pypi/red-discordbot@3.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.5
34
url pkg:pypi/red-discordbot@3.3.6
purl pkg:pypi/red-discordbot@3.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.6
35
url pkg:pypi/red-discordbot@3.3.7
purl pkg:pypi/red-discordbot@3.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.7
36
url pkg:pypi/red-discordbot@3.3.8
purl pkg:pypi/red-discordbot@3.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.8
37
url pkg:pypi/red-discordbot@3.3.9
purl pkg:pypi/red-discordbot@3.3.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.9
38
url pkg:pypi/red-discordbot@3.3.10
purl pkg:pypi/red-discordbot@3.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.10
39
url pkg:pypi/red-discordbot@3.3.11
purl pkg:pypi/red-discordbot@3.3.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.11
References
0
reference_url https://github.com/Cog-Creators/Red-DiscordBot/pull/4183
reference_id
reference_type
scores
url https://github.com/Cog-Creators/Red-DiscordBot/pull/4183
1
reference_url https://github.com/Cog-Creators/Red-DiscordBot/pull/4183/commits/e269ea0d3bc88417163c18431b1df38a9be92bfc
reference_id
reference_type
scores
url https://github.com/Cog-Creators/Red-DiscordBot/pull/4183/commits/e269ea0d3bc88417163c18431b1df38a9be92bfc
2
reference_url https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-7257-96vg-qf6x
reference_id
reference_type
scores
url https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-7257-96vg-qf6x
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-tyaj-tzft-2ba8