antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2026-106443 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...

antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2026-55073 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2026-55073 Source advisory: OSV:PYSEC-2026-3940...

antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2026-55073 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2026-55073 Source advisory: OSV:GHSA-JF6Q-CHMF-3H3V...

antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2026-49452 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

adsmsg (>=1.2.0, <=1.3.1), alphalogic-api3 (>=0.0.1, <=0.1.5) +62 more potentially affected by CVE-2026-0994 via protobuf (3.14.0)

protobuf PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - adsmsg =1.2.0, =0.0.1, =0.1.0, =0.7.2b4, =0.0.1, =1.47.0, =0.0.1.dev50, =1.0.2, =0.4.8, =0.3.5, =2.0.3, =0.1.1, =0.9.1, =0.9.4 and more Source...

antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2025-68616 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2025-68616 Source advisory: OSV:PYSEC-2026-2034...

adsmsg (>=1.2.0, <=1.3.1), alphalogic-api3 (>=0.0.1, <=0.1.5) +62 more potentially affected by CVE-2025-4565 via protobuf (3.14.0)

protobuf PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - adsmsg =1.2.0, =0.0.1, =0.1.0, =0.7.2b4, =0.0.1, =1.47.0, =0.0.1.dev50, =1.0.2, =0.4.8, =0.3.5, =2.0.3, =0.1.1, =0.9.1, =0.9.4 and more Source...

antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2026-49452 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...

antipetros-discordbot (>=0.1.0, <=0.1.7) potentially affected by CVE-2025-68616 via weasyprint (52.2.0)

weasyprint PYPI version 52.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - antipetros-discordbot =0.1.0, =0.1.7 Source cves: CVE-2025-68616 Source advisory: OSV:GHSA-983W-RHVV-GWMV...

EUVD-2021-16090

Malware in sbrugna...

adsmsg (>=1.2.0, <=1.3.1), alphalogic-api3 (>=0.0.1, <=0.1.5) +62 more potentially affected by CVE-2025-4565 via protobuf (3.14.0)

protobuf PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - adsmsg =1.2.0, =0.0.1, =0.1.0, =0.7.2b4, =0.0.1, =1.47.0, =0.0.1.dev50, =1.0.2, =0.4.8, =0.3.5, =2.0.3, =0.1.1, =0.9.1, =0.9.4 and more Source...

CVE-2021-29493

Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users to craft a message that can reveal sensitive and harmful information. Users can upgrade to version 5a84d60018468e5c0346f7ee74b2b4650a6dade7...

GHSA-5JQ8-Q6RJ-9GQ4 Red-DiscordBot vulnerable to Incorrect Authorization in commands API

Impact Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of the core commands or core cogs...

Red-DiscordBot vulnerable to Incorrect Authorization in commands API

Impact Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of the core commands or core cogs...

CVE-2024-39905 Red-DiscordBot vulnerable to Incorrect Authorization in commands API

Red is a fully modular Discord bot. Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of t...

CVE-2024-39905 Red-DiscordBot vulnerable to Incorrect Authorization in commands API

Red is a fully modular Discord bot. Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of t...

abracadabra (0.0.6), agilecode-test-tools (>=0.4.0, <=0.5.0) +76 more potentially affected by CVE-2023-50447 via pillow (8.1.0)

pillow PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.6 - agilecode-test-tools =0.4.0, =0.1.1, =0.1.0, =0.11.0, =0.1.0, =0.4.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves:...

CVE-2021-29493

Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users to craft a message that can reveal sensitive and harmful information. Users can upgrade to version 5a84d60018468e5c0346f7ee74b2b4650a6dade7...

CVE-2021-29493

CVE-2021-29493 concerns kennnyshiwa-cogs (for Red Discordbot), where an RCE vulnerability exists in the Tickets module. The public details describe an exploit that lets a Discord user craft a message to reveal sensitive information. A fixed release is available: upgrade to version 5a84d60018468e5...

CVE-2021-29493 Kennnyshiwa-cogs vulnerable to Remote Code Execution in Tickets Module

Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users to craft a message that can reveal sensitive and harmful information. Users can upgrade to version 5a84d60018468e5c0346f7ee74b2b4650a6dade7...