{"action":"Upgrade red-discordbot to 3.3.12 or later.","affected":[{"fixed":"3.3.12","introduced":"0"}],"component":"red-discordbot","cve_ids":["CVE-2020-15147"],"ecosystem":"PyPI","epss":0.02614,"exploited":false,"fixed_versions":["3.3.12"],"ghsa_id":"GHSA-7257-96vg-qf6x","id":"tcs_01M5KGA4KH9849FV6QJ0AGVMN9","modified_at":"2026-02-22T22:49:33.801911Z","published_at":"2020-08-21T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-266","https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-7257-96vg-qf6x","https://github.com/Cog-Creators/Red-DiscordBot/pull/4183/commits/e269ea0d3bc88417163c18431b1df38a9be92bfc","https://github.com/Cog-Creators/Red-DiscordBot/pull/4183"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-266","url":"https://osv.dev/vulnerability/PYSEC-2020-266"}],"summary":"Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted \"going live\" messages to inj"}