| Package | Affected versions | Patched versions |
|---|---|---|
| megabot | < 1.5.0 | 1.5.0 |
MEGABOT is a fully customized Discord bot for learning and fun. The `/math` command and functionality of MEGABOT versions < 1.5.0 contains a remote code execution vulnerability due to a Python `eval()`. The vulnerability allows an attacker to inject Python code into the `expression` parameter when using `/math` in any Discord channel. This vulnerability impacts any discord guild utilizing MEGABOT. This vulnerability was fixed in release version 1.5.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free