Botpress vulnerabilities
We track 1 vulnerability in Botpress products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 27, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Botpress vulnerabilities
- 8.2 High severity
botpress: Insufficient Verification of Data Authenticity
The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'. When processing media messages, it fetches user-controlled URLs ('MediaUrlN' parameters) using HTTP requests that include the integration's Twilio