Information Disclosure

sopelmodulesweather is vulnerable to information disclosure. The API keys can be potentially disclosed if a user is actively blackholing the location or weather APIs and those APIs become unavailable...

GHSA-63RQ-P8FP-524Q Potential API key leak

If a user is actively blackholing the location or weather APIs, or those APIs become otherwise unavailable, it is possible for the API keys to get leaked to the active IRC channel. This is patched in v1.2.4...

Authentication flaw

The HSRP implementation in Cisco NX-OS 6.22a and earlier allows remote attackers to bypass authentication and cause a denial of service group-member state modification and traffic blackholing via malformed HSRP packets, aka Bug ID CSCup11309...