Skip to content
OpenAdvisories

Vendor

duck-organization

16 known vulnerabilities.

Products

quest-bot 10 questbot 5 duck-site 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-48485

    Quest Bot: Stored warn reasons can still trigger bot-powered mass mentions through `/warns`.

    Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the latest release suppresses mentions when creating, unbanning, unwarning, kicking, muting, and unmuting, but stored warning reasons are still printed by /warns without mention suppression. A mo…

    duck-organization questbot
  • Low 2.3
    CVE-2026-47188

    Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions.

    Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the latest release suppresses mentions in several moderation commands, but /unban and /unwarn still echo user-controlled reason text in public b…

    duck-organization quest-bot
  • Low 2.3
    CVE-2026-47175

    Quest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` pings

    Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo user-controlled reason text in public bot replies without disabling mention parsing. A moderator who does not h…

    duck-organization quest-bot