botpress

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

botpress records in CISA KEV

No botpress vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Botpress · all components

TI-2026-04344 CVE-2026-4984 · GHSA-6mjh-67rm-ph7x

MEDIUM 41

The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00162 Published 2026-03-27 No fix listed CWE-345