{"action":"Upgrade botframework-connector to 4.7.2 or later.","affected":[{"fixed":"4.7.2","introduced":"4.7.0"},{"fixed":"4.8.1","introduced":"4.8.0"},{"fixed":"4.9.3","introduced":"4.9.0"},{"fixed":"4.10.1","introduced":"4.10.0"}],"component":"botframework-connector","cve_ids":["CVE-2021-1725"],"ecosystem":"PyPI","epss":0.01074,"exploited":false,"fixed_versions":["4.7.2","4.8.1","4.9.3","4.10.1"],"ghsa_id":"GHSA-cqff-fx2x-p86v","id":"tcs_01M5KGCZ5SNMKZTZP6M3KGVTCX","modified_at":"2023-11-08T04:04:34.284622Z","published_at":"2021-01-12T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-422","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1725","https://github.com/microsoft/botbuilder-python/security/advisories/GHSA-cqff-fx2x-p86v"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-422","url":"https://osv.dev/vulnerability/PYSEC-2021-422"}],"summary":"Bot Framework SDK Information Disclosure Vulnerability"}