{"action":"Upgrade nonebot2 to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"2.0.0a16"}],"component":"nonebot2","cve_ids":["CVE-2024-21624"],"ecosystem":"PyPI","epss":0.00492,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-59j8-776v-xxxg","id":"tcs_01M5KF0JR8Q9MPE0616G1JJ9NH","modified_at":"2026-09-10T03:50:05.511545008Z","published_at":"2024-02-09T15:04:08Z","references":["https://osv.dev/vulnerability/GHSA-59j8-776v-xxxg","https://github.com/nonebot/nonebot2/security/advisories/GHSA-59j8-776v-xxxg","https://nvd.nist.gov/vuln/detail/CVE-2024-21624","https://github.com/nonebot/nonebot2/pull/2509","https://github.com/nonebot/nonebot2/commit/b65b3b438c95894654fd9081139989c757bdc6c1","https://github.com/nonebot/nonebot2","https://github.com/pypa/advisory-database/tree/main/vulns/nonebot2/PYSEC-2024-37.yaml"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-59j8-776v-xxxg","url":"https://osv.dev/vulnerability/GHSA-59j8-776v-xxxg"}],"summary":"NoneBot Potential Information Leak in User-Constructed Message Templates"}