{"action":"Upgrade red-discordbot to 3.3.11 or later.","affected":[{"fixed":"3.3.11","introduced":"0"}],"component":"red-discordbot","cve_ids":["CVE-2020-15140"],"ecosystem":"PyPI","epss":0.01156,"exploited":false,"fixed_versions":["3.3.11"],"ghsa_id":"GHSA-55j9-849x-26h4","id":"tcs_01M5KGA4E08E5H7ZX7YACS5PFJ","modified_at":"2026-02-22T22:49:33.778985Z","published_at":"2020-08-21T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-265","https://github.com/Cog-Creators/Red-DiscordBot/pull/4175/commits/9ab536235bafc2b42c3c17d7ce26f1cc64482a81","https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-55j9-849x-26h4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-265","url":"https://osv.dev/vulnerability/PYSEC-2020-265"}],"summary":"In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia m"}