Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-wy1w-6hzy-9bbf
SummaryIn Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive actions and/or access sensitive information. This critical exploit has been fixed on version 3.3.11.
Aliases
0
alias CVE-2020-15140
1
alias GHSA-55j9-849x-26h4
2
alias PYSEC-2020-265
Fixed_packages
0
url pkg:pypi/red-discordbot@3.3.11
purl pkg:pypi/red-discordbot@3.3.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.11
Affected_packages
0
url pkg:pypi/red-discordbot@3.0.0b16
purl pkg:pypi/red-discordbot@3.0.0b16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b16
1
url pkg:pypi/red-discordbot@3.0.0b17
purl pkg:pypi/red-discordbot@3.0.0b17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b17
2
url pkg:pypi/red-discordbot@3.0.0b18
purl pkg:pypi/red-discordbot@3.0.0b18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b18
3
url pkg:pypi/red-discordbot@3.0.0b19
purl pkg:pypi/red-discordbot@3.0.0b19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b19
4
url pkg:pypi/red-discordbot@3.0.0b20
purl pkg:pypi/red-discordbot@3.0.0b20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b20
5
url pkg:pypi/red-discordbot@3.0.0b21
purl pkg:pypi/red-discordbot@3.0.0b21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0b21
6
url pkg:pypi/red-discordbot@3.0.0rc1
purl pkg:pypi/red-discordbot@3.0.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc1
7
url pkg:pypi/red-discordbot@3.0.0rc1.post1
purl pkg:pypi/red-discordbot@3.0.0rc1.post1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc1.post1
8
url pkg:pypi/red-discordbot@3.0.0rc2
purl pkg:pypi/red-discordbot@3.0.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc2
9
url pkg:pypi/red-discordbot@3.0.0rc3
purl pkg:pypi/red-discordbot@3.0.0rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc3
10
url pkg:pypi/red-discordbot@3.0.0rc3.post1
purl pkg:pypi/red-discordbot@3.0.0rc3.post1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0rc3.post1
11
url pkg:pypi/red-discordbot@3.0.0
purl pkg:pypi/red-discordbot@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.0
12
url pkg:pypi/red-discordbot@3.0.1
purl pkg:pypi/red-discordbot@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.1
13
url pkg:pypi/red-discordbot@3.0.2
purl pkg:pypi/red-discordbot@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.0.2
14
url pkg:pypi/red-discordbot@3.1.0
purl pkg:pypi/red-discordbot@3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.0
15
url pkg:pypi/red-discordbot@3.1.1
purl pkg:pypi/red-discordbot@3.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.1
16
url pkg:pypi/red-discordbot@3.1.2
purl pkg:pypi/red-discordbot@3.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.2
17
url pkg:pypi/red-discordbot@3.1.3
purl pkg:pypi/red-discordbot@3.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.3
18
url pkg:pypi/red-discordbot@3.1.4
purl pkg:pypi/red-discordbot@3.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.4
19
url pkg:pypi/red-discordbot@3.1.5
purl pkg:pypi/red-discordbot@3.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.5
20
url pkg:pypi/red-discordbot@3.1.6
purl pkg:pypi/red-discordbot@3.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.6
21
url pkg:pypi/red-discordbot@3.1.7
purl pkg:pypi/red-discordbot@3.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.7
22
url pkg:pypi/red-discordbot@3.1.8
purl pkg:pypi/red-discordbot@3.1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.8
23
url pkg:pypi/red-discordbot@3.1.9
purl pkg:pypi/red-discordbot@3.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.1.9
24
url pkg:pypi/red-discordbot@3.2.0
purl pkg:pypi/red-discordbot@3.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.2.0
25
url pkg:pypi/red-discordbot@3.2.1
purl pkg:pypi/red-discordbot@3.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.2.1
26
url pkg:pypi/red-discordbot@3.2.2
purl pkg:pypi/red-discordbot@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.2.2
27
url pkg:pypi/red-discordbot@3.2.3
purl pkg:pypi/red-discordbot@3.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.2.3
28
url pkg:pypi/red-discordbot@3.3.0
purl pkg:pypi/red-discordbot@3.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.0
29
url pkg:pypi/red-discordbot@3.3.1
purl pkg:pypi/red-discordbot@3.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.1
30
url pkg:pypi/red-discordbot@3.3.2
purl pkg:pypi/red-discordbot@3.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.2
31
url pkg:pypi/red-discordbot@3.3.3
purl pkg:pypi/red-discordbot@3.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.3
32
url pkg:pypi/red-discordbot@3.3.4
purl pkg:pypi/red-discordbot@3.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.4
33
url pkg:pypi/red-discordbot@3.3.5
purl pkg:pypi/red-discordbot@3.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.5
34
url pkg:pypi/red-discordbot@3.3.6
purl pkg:pypi/red-discordbot@3.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.6
35
url pkg:pypi/red-discordbot@3.3.7
purl pkg:pypi/red-discordbot@3.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.7
36
url pkg:pypi/red-discordbot@3.3.8
purl pkg:pypi/red-discordbot@3.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.8
37
url pkg:pypi/red-discordbot@3.3.9
purl pkg:pypi/red-discordbot@3.3.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.9
38
url pkg:pypi/red-discordbot@3.3.10
purl pkg:pypi/red-discordbot@3.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bd1p-1gv9-q3dg
1
vulnerability VCID-tyaj-tzft-2ba8
2
vulnerability VCID-wy1w-6hzy-9bbf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/red-discordbot@3.3.10
References
0
reference_url https://github.com/Cog-Creators/Red-DiscordBot/pull/4175/commits/9ab536235bafc2b42c3c17d7ce26f1cc64482a81
reference_id
reference_type
scores
url https://github.com/Cog-Creators/Red-DiscordBot/pull/4175/commits/9ab536235bafc2b42c3c17d7ce26f1cc64482a81
1
reference_url https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-55j9-849x-26h4
reference_id
reference_type
scores
url https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-55j9-849x-26h4
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-wy1w-6hzy-9bbf