Resource exhaustion in Duck-organization Questbot
CVE-2026-49347
Quest Bot is an opensource Discord Bot. Prior to version 1.1.8, any user who can access the ticket panel can repeatedly create new ticket channels. The latest release still creates a new database ticket and Discord channel for every comple…
EPSS: 0.002 (14.5th percentile) — read the EPSS interpretation.
Affected products
- Duck-organization Questbot — versions < 1.1.8
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)