CyberSecBulletin

PuddingBot vulnerabilities

We track 1 vulnerability in PuddingBot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 11, 2022.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest PuddingBot vulnerabilities

  • 7.5 High severity

    pudding-bot: Use of Hard-coded Credentials

    CVE-2022-21669PuddingBotEPSS 1.07%

    PuddingBot is a group management bot. In version 0.0.6-b933652 and prior, the bot token is publicly exposed in main.py, making it accessible to malicious actors. The bot token has been revoked and new version is already running on the server. As of time of pub