CVE-2021-41191

Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As a workaround, add `@require_apikey` in `BOT/lib/cogs/website.py` under the route for `/v1/products`.

Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As a workaround, add `@require_apikey` in `BOT/lib/cogs/website.py` under the route for `/v1/products`.

Roblox-Purchasing-Hub es un centro de compras de productos de Roblox de código abierto. Un riesgo de seguridad en las versiones 1.0.1 y anteriores, permitía a las personas que tenían la URL de la API de alguien conseguir archivos de productos sin una clave de la API. Este problema ha sido corregido en la versión 1.0.2. Como solución, añada "@require_apikey" en "BOT/lib/cogs/website.py" bajo la ruta para "/v1/products"