{"data":{"id":"cae06e1e-aacc-49ca-bbf3-74d809177ba4","title":"CVE-2026-23842: ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10…","summary":"CVE-2026-23842 affects ChatterBot versions up to 1.2.10, a machine learning conversational dialog engine for chat bots. Concurrent invocations of the get_response() method can exhaust the underlying SQLAlchemy connection pool, causing a denial-of-service condition. Service stays unavailable until a manual restart.","solution":"Version 1.2.11 fixes the issue.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-23842","publishedAt":"2026-01-19T19:16:04.510Z","cveId":"CVE-2026-23842","cweIds":["CWE-400"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["chatterbot@<= 1.2.10 (fixed: 1.2.11)"],"affectedPackageNames":["chatterbot"],"affectedPackageRefs":["pypi:chatterbot"],"affectedVendors":[],"affectedVendorsRaw":["ChatterBot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"ChatterBot denial of service through concurrent get_response() calls","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00541,"epssCheckedAt":"2026-11-04T18:09:13.251Z","kevDateAdded":null,"advisoryAliases":["GHSA-v4w8-49pv-mf72"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:19.613Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-01-17T13:45:19.169Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:42:04.667Z","capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"chatterbot","fixedVersion":"1.2.11","matchedVersion":"1.2.11","fixReleasedAt":"2026-01-17T13:45:19.169Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:04.519Z"}]}}