Microsoft Bot Framework SDK for .NET Framework

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2021-432254.0.0 – < 4.15.0Bot Framework SDK Remote Code Execution VulnerabilityCRITICAL 9.82.9 %
CVE-2021-17254.0.0 – < publicationBot Framework SDK Information Disclosure VulnerabilityMEDIUM 5.51.1 %