Vulnerability in Duck-organization Quest-bot
CVE-2026-47171
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a normal user can create a reminder whose message contains @everyone or @here. When the reminder triggers, the bot sends the…
EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.
Affected products
- Duck-organization Quest-bot — versions < 1.0.3
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)