PatchTheCVECVE-2021-41250: Python discord bot is the community bot for the Python Discord community
CVE-2021-41250 is a medium-severity flaw (CVSS 4.3) affecting bot. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not trigger. This means that by including any non-blacklisted URL moderation filters can be bypassed. This issue has been resolved in commit 67390298852513d13e0213870e50fb3cff1424e0
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 4.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.8% (top 45%) |
| CISA exploited list | No |
| Weakness | CWE-20 |
| Published | 2021-11-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2021-41250?
bot: upgrade to 67390298852513d13e0213870e50fb3cff1424e0. Exact commands for each OS are on this page.
Is CVE-2021-41250 being exploited?
CVE-2021-41250 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2021-41250 affect?
CVE-2021-41250 affects bot. Severity is medium (CVSS 4.3). Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not trigger. This means
How urgent is CVE-2021-41250?
Priority 29/100. No elevated risk signals yet.
Software pages
Python vulnerabilities · Discord vulnerabilities
Related CVEs
- CVE-2024-42335 MEDIUM 5.4 MITIGATE 7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CVE-2023-37221 HIGH 8.8 UPGRADE 7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
- CVE-2021-26918 CRITICAL 9.8 UPGRADE The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of