Skip to content
OpenAdvisories

Vendor

botpress

1 known vulnerabilities.

Products

botpress 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-4984

    Botpress - Credential Disclosure via Twilio Webhook Handler

    The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'. When processing media messages, it fetches user-controlled URLs ('MediaUrlN' parameters) using HTTP requests that include the integration's Twili…

    botpress botpress