Read the docs
TI-2021-18085 Aliases CVE-2021-41250

Presence of non-blacklisted URL bypasses all other filters

Priority LOW 21CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not trigger. This means that by including any non-blacklisted URL moderation filters can be bypassed. This issue has been resolved in commit 67390298852513d13e0213870e50fb3cff1424e0

Why it matters now

EPSS 0.00764 55th percentileScored 2026-11-07
Fix Fixed bot (python-discord): 67390298852513d13e0213870e50fb3cff1424e0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
python-discordbotbefore 67390298852513d13e0213870e50fb3cff1424e067390298852513d13e0213870e50fb3cff1424e0Patch availableCNA
  • bot Vendorpython-discord Affected before 67390298852513d13e0213870e50fb3cff1424e0 Fixed in 67390298852513d13e0213870e50fb3cff1424e0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pythondiscord:bot:*:*:*:*:*:*:*:*before 67390298852513d13e0213870e50fb3cff1424e0Vulnerablepython-discord
  • cpe:2.3:a:pythondiscord:bot:*:*:*:*:*:*:*:* Versions before 67390298852513d13e0213870e50fb3cff1424e0 Vulnerable ·python-discord

Remediation

  • Fix · CNA bot (python-discord) Fixed in 67390298852513d13e0213870e50fb3cff1424e0

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-41250

References

Patch 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences