Ticketer is a command based ticket system cog (plugin) for the red discord bot. A vulnerability allowing discord users to expose sensitive information has been found in the Ticketer cog. Please upgrade to version 1.0.1 as soon as possible. As a workaround users may unload the ticketer cog to disable the exploitable code.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:dav-cogs_project:dav-cogs:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"range": [
{
"fixed": "1.0.1"
}
],
"source": "CPE_RANGE"
}
],
"vendor_product": "dav-cogs_project:dav-cogs"
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "3d54ef9b52ce03f139b7d6c1cc38c375e65593fd"
}
],
"source": "REFERENCES_COMMIT"
}
]
}