Description
Bot Framework SDK Information Disclosure Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Bot Framework SDK for .NET Framework | 4.0.0 – < publication | publication |
| Microsoft | Bot Framework SDK for JavaScript | 4.0.0 – < publication | publication |
| Microsoft | Bot Framework SDK for Python | 4.0.0 – < publication | publication |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | botframework-connector | >= 4.7.0, < 4.7.3 | 4.7.3 | GHSA-fvcj-hvfw-7f2v |
| npm | botframework-connector | >= 4.8.0, < 4.8.1 | 4.8.1 | GHSA-fvcj-hvfw-7f2v |
| npm | botframework-connector | >= 4.9.0, < 4.9.4 | 4.9.4 | GHSA-fvcj-hvfw-7f2v |
| npm | botframework-connector | >= 4.10.0, < 4.10.3 | 4.10.3 | GHSA-fvcj-hvfw-7f2v |
| PyPI | botframework-connector | >= 4.7.0, < 4.7.2 | 4.7.2 | GHSA-cqff-fx2x-p86v |
| PyPI | botframework-connector | >= 4.8.0, < 4.8.1 | 4.8.1 | GHSA-cqff-fx2x-p86v |
| PyPI | botframework-connector | >= 4.9.0, < 4.9.3 | 4.9.3 | GHSA-cqff-fx2x-p86v |
| PyPI | botframework-connector | >= 4.10.0, < 4.10.1 | 4.10.1 | GHSA-cqff-fx2x-p86v |
| PyPI | botframework-connector | >= 4.7.0, < 4.7.2 · >= 4.8.0, < 4.8.1 · >= 4.9.0, < 4.9.3 · >= 4.10.0, < 4.10.1 | 4.7.2, 4.8.1, 4.9.3, 4.10.1 | PYSEC-2021-422 |
References
- Bot Framework SDK Information Disclosure Vulnerability vendor-advisory