Vulnerability in Duck-organization Quest-bot
CVE-2026-47175
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo user-controlled reason text in public bot replies without disabling mention parsing. A mode…
EPSS: 0.002 (14.5th percentile) — read the EPSS interpretation.
Affected products
- Duck-organization Quest-bot — versions < 1.0.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)