Skip to content
OpenAdvisories

Package · PyPI

chatterbot

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.5
    CVE-2026-58198

    ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer

    ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrainer.extract() uses a predictable home-rooted output directory (~/ubuntu_data/ubuntu_dialogs) with a check-then-create pattern followed by t…

    gunthercox ChatterBot chatterbot PyPI
  • High 7.5
    CVE-2026-23842 Public exploit

    ChatterBot has Denial of Service via Database Connection Pool Exhaustion

    ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10 are vulnerable to a denial-of-service condition caused by improper database session and connection pool management. Concurrent invocations …

    gunthercox ChatterBot chatterbot PyPI