A vulnerability was found in tiredtyrant flairbot. It has been declared as critical. This vulnerability affects unknown code of the file flair.py. The manipulation leads to sql injection. Using CWE to declare the problem leads to CWE-89. The weakness was presented 01/07/2023 as 5e112b68c6faad1d4699d02c1ebbb7daf48ef8fb. The advisory is available at github.com. This vulnerability was named CVE-2015-10026. The attack can only be initiated within the local network. Technical details are available. There is no exploit available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment. This vulnerability is assigned to T1505 by the MITRE ATT&CK project. It is declared as not defined. As 0-day the estimated underground price was around $0-$5k. The patch is identified as 5e112b68c6faad1d4699d02c1ebbb7daf48ef8fb. The bugfix is ready for download at github.com. It is recommended to apply a patch to fix this issue. A possible mitigation has been published before and not just after the disclosure of the vulnerability.