CVE-2025-65957CWE-200information-disclosure

CVE-2025-65957

published November 26, 2025

CVSS
8.8
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

Core Bot Is an Open Source discord bot made for maple hospital servers. Prior to commit dffe050, the API keys (SUPABASE_API_KEY, TOKEN) are loaded using environment variables, but there are cases in code (error handling, summaries, webhooks) where configuration summaries may inadvertently leak sensitive data (e.g., by failing to redact data in summary embeds or logs). This issue has been patched via commit dffe050.

The record
Technical detail
CVSS
8.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-11-26T05:15Z
References (2)
https://github.com/Intercore-Productions/Core-Bot/commit/dffe050d565a580edfcd0242efa45da88ab31260 · [email protected]https://github.com/Intercore-Productions/Core-Bot/security/advisories/GHSA-42j6-x28v-38r8 · [email protected]
EPSS history
Timeline
  • 25 NOV 23:33Z
    Core Bot is Leaking Sensitive Credentials in Logs, Errors, and Messages
    cvelistv5