Vulnerability in Duck-organization Quest-bot
CVE-2026-47172
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, the repository has a privileged deploy workflow that runs after the unprivileged build workflow completes. The build workflo…
EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.
Affected products
- Duck-organization Quest-bot — versions < 1.0.3
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)