https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 16:10:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-3855 EUVD-2026-3855 https://cve.radiocsirt.org/vuln/euvd-2026-3855 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21624 <p>nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates. The identified vulnerability has been remedied in pull request #2509 and will be included in versions released from 2.2.0. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability. A temporary workaround involves filtering underscores before incorporating user input into the message template.</p> <p>nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates. The identified vulnerability has been remedied in pull request #2509 and will be included in versions released from 2.2.0. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability. A temporary workaround involves filtering underscores before incorporating user input into the message template.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-21624 https://cve.radiocsirt.org/vuln/ghsa-59j8-776v-xxxg <p><strong>Affected:</strong> PyPI: nonebot2</p> <p>### Impact This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates.</p> <p>### Patches The identified vulnerability has been remedied in fix #2509 and will be included in versions released after 2.1.3. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability.</p> <p>### Workarounds A temporary workaround involves filtering underscores before incorporating user input into the message template.</p> <p>### References - [Pull Request #2509](https://github.com/nonebot/nonebot2/pull/2509) - [CWE-1336](https://cwe.mitre.org/data/definitions/1336.html)</p> <p><strong>Affected:</strong> PyPI: nonebot2</p> <p>### Impact This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates.</p> <p>### Patches The identified vulnerability has been remedied in fix #2509 and will be included in versions released after 2.1.3. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability.</p> <p>### Workarounds A temporary workaround involves filtering underscores before incorporating user input into the message template.</p> <p>### References - [Pull Request #2509](https://github.com/nonebot/nonebot2/pull/2509) - [CWE-1336](https://cwe.mitre.org/data/definitions/1336.html)</p> https://cve.radiocsirt.org/vuln/ghsa-59j8-776v-xxxg https://cve.radiocsirt.org/vuln/gsd-2024-21624 gsd-2024-21624 https://cve.radiocsirt.org/vuln/gsd-2024-21624 https://cve.radiocsirt.org/vuln/pysec-2024-37 <p><strong>Affected:</strong> PyPI: nonebot2</p> <p>nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates. The identified vulnerability has been remedied in pull request #2509 and will be included in versions released from 2.2.0. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability. A temporary workaround involves filtering underscores before incorporating user input into the message template.</p> <p><strong>Affected:</strong> PyPI: nonebot2</p> <p>nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak (e.g., environment variables) in instances where developers utilize `MessageTemplate` and incorporate user-provided data into templates. The identified vulnerability has been remedied in pull request #2509 and will be included in versions released from 2.2.0. Users are strongly advised to upgrade to these patched versions to safeguard against the vulnerability. A temporary workaround involves filtering underscores before incorporating user input into the message template.</p> https://cve.radiocsirt.org/vuln/pysec-2024-37