{"action":"Upgrade red-dashboard to 0.1.7a or later.","affected":[{"fixed":"0.1.7a","introduced":"0"}],"component":"red-dashboard","cve_ids":["CVE-2020-26249"],"ecosystem":"PyPI","epss":0.01303,"exploited":false,"fixed_versions":["0.1.7a"],"ghsa_id":"GHSA-hm45-mgqm-gjm4","id":"tcs_01M5KGB02X2Z65G9PAM0JBD9H5","modified_at":"2023-11-08T04:03:16.188805Z","published_at":"2020-12-09T00:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-98","https://github.com/Cog-Creators/Red-Dashboard/commit/a6b9785338003ec87fb75305e7d1cc2d40c7ab91","https://github.com/Cog-Creators/Red-Dashboard/security/advisories/GHSA-hm45-mgqm-gjm4","https://pypi.org/project/Red-Dashboard","https://github.com/Cog-Creators/Red-Dashboard/commit/99d88b840674674166ce005b784ae8e31e955ab1"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"PYSEC-2020-98","url":"https://osv.dev/vulnerability/PYSEC-2020-98"},{"source":"nvd","source_id":"CVE-2020-26249","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26249"}],"summary":"Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord u"}