{"action":"Upgrade nonebot2 to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"2.0.1"}],"component":"nonebot2","cve_ids":["CVE-2024-21624"],"ecosystem":"PyPI","epss":0.00492,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-59j8-776v-xxxg","id":"tcs_01M5KGN6YKF31F3SAJV79Q9KWV","modified_at":"2024-02-16T16:41:43.954924Z","published_at":"2024-02-09T23:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-37","https://github.com/nonebot/nonebot2/security/advisories/GHSA-59j8-776v-xxxg","https://github.com/nonebot/nonebot2/pull/2509"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-37","url":"https://osv.dev/vulnerability/PYSEC-2024-37"}],"summary":"nonebot2 is a cross-platform Python asynchronous chatbot framework written in Python. This security advisory pertains to a potential information leak (e.g., environment variables) in instances where d"}