Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

questbot — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in questbot, with AI-generated Chinese analysis, references, and POCs.

Vendor: duck-organization

CVE IDTitleCVSSSeverityPublished
CVE-2026-49347 Quest Bot: Ticket creation has no per-user open-ticket limit or cooldown CWE-770--2026-06-12
CVE-2026-48485 Quest Bot: Stored warn reasons can still trigger bot-powered mass mentions through `/warns`. CWE-116--2026-06-12
CVE-2026-47197 Quest Bot: Discord moderation role hierarchy bypass in ban, kick, mute, unmute, warn, and nickname commands CWE-862--2026-06-12
CVE-2026-47195 Quest Bot: Per-channel permission overwrite bypass in purge and slowmode commands. CWE-863--2026-06-12
CVE-2026-47196 Quest Bot: Empty automod rule causes every guild message to be deleted CWE-20--2026-06-12

All 5 known CVE vulnerabilities affecting questbot with full Chinese analysis, references, and POCs where available.