-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| py-cord | pip | = 2.0.0 | 2.0.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from how interaction data was processed in applications without the 'bot' scope. The pull request #1568 shows critical changes to the Interaction._from_data method, specifically adding fallbacks for missing guild data and using Object() when guild information isn't properly scoped. This matches the CWE-284 (Improper Access Control) description, as the original implementation failed to properly validate/handle interaction context from unauthorized scopes, enabling remote shutdowns via malformed interactions.
PythonPythonOngoing coverage of React2Shell