CVE-2021-29466

Name of the Vulnerable Software and Affected Versions: Discord-Recon versions 0.0.3 and prior

Description: Discord-Recon is a bot for the Discord chat service. A remote attacker can read local files from the server, disclosing important information.

Recommendations: For versions 0.0.3 and prior, as a temporary workaround, a bot maintainer can locate the file app.py and add .replace('..','') into the Path variable inside of the recon function. Update to version 0.0.4 to resolve the issue.