Skip to content
OpenAdvisories

Package · Maven

net.dv8tion:JDA

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    JDA (Java Discord API) downloads external URLs when updating message components

    ### Impact Anyone using untrusted message components may be affected. On versions >=6.0.0,<6.1.3 of JDA, the requester will attempt to download external media URLs from components if they are used in an update or send request. If you are used `Message#getComp…