Skip to content
OpenAdvisories

Product · duck-organization

quest-bot

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-47188

    Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions.

    Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the latest release suppresses mentions in several moderation commands, but /unban and /unwarn still echo user-controlled reason text in public b…

    duck-organization quest-bot
  • Low 2.3
    CVE-2026-47175

    Quest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` pings

    Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo user-controlled reason text in public bot replies without disabling mention parsing. A moderator who does not h…

    duck-organization quest-bot