GHSA-63rq-p8fp-524q
Potential API key leak
GHSA-63rq-p8fp-524q is a vulnerability with no CVSS score yet in sopel-modules-weather, published April 13, 2021. No source lists public exploit code. Fixed in sopel-modules-weather 1.2.4.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.4sopel-modules-weather +1 more
Description
If a user is actively blackholing the location or weather APIs, or those APIs become otherwise unavailable, it is possible for the API keys to get leaked to the active IRC channel.
This is patched in v1.2.4
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sopel-modules-weatherPyPI | before 1.2.4 | 1.2.4 |
sopel-modules-weatherPyPI | before 1.2.4, plus listed versions 0.0.10.0.20.0.30.0.40.0.5 Show 9 moreShow less0.0.60.0.71.0.01.0.11.0.21.1.01.2.01.2.11.2.2 | 1.2.4 |
What each source reports
GitHub AdvisoriesNo score
Potential API key leak
If a user is actively blackholing the location or weather APIs, or those APIs become otherwise unavailable, it is possible for the API keys to get leaked to the active IRC channel.
This is patched in v1.2.4
- Record
GHSA-63rq-p8fp-524q- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVNo score
Potential API key leak
If a user is actively blackholing the location or weather APIs, or those APIs become otherwise unavailable, it is possible for the API keys to get leaked to the active IRC channel.
This is patched in v1.2.4
- Record
GHSA-63rq-p8fp-524q- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.