Vulnerability in Duck-organization Quest-bot
CVE-2026-47173
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a normal user can create a ticket with a reason containing @everyone, @here, user mentions, or role mentions. When the ticke…
EPSS: 0.003 (18.0th percentile) — read the EPSS interpretation.
Affected products
- Duck-organization Quest-bot — versions < 1.0.3
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)