Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1325 CNY

100%
Buy Us a Coffee

quest-bot — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in quest-bot, with AI-generated Chinese analysis, references, and POCs.

Vendor: duck-organization

CVE IDTitleCVSSSeverityPublished
CVE-2026-47189 Quest Bot: AutoMod removal can delete rules from another guild by global rule ID CWE-639--2026-06-11
CVE-2026-47188 Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions. CWE-116--2026-06-11
CVE-2026-47177 Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility channel CWE-200--2026-06-11
CVE-2026-47176 Quest Bot: Logging module can disclose private-channel message contents to a lower-visibility log channel CWE-200--2026-06-11
CVE-2026-47175 Quest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` pings CWE-116--2026-06-11
CVE-2026-47173 Quest Bot: Ticket reason allows mass-mention injection CWE-116--2026-06-11
CVE-2026-47172 Quest Bot: Untrusted pull request code can be built and deployed by privileged `workflow_run` deployment. CWE-829--2026-06-11
CVE-2026-47171 Quest Bot: Reminder messages allow stored mass mentions through `@everyone` and `@here` CWE-116--2026-06-11
CVE-2026-47163 Quest Bot: Unprivileged users can create and remove AutoMod rules. CWE-862--2026-06-11
CVE-2026-47169 Quest Bot: Manage Server users can configure AutoRole to grant Administrator to controlled joining accounts CWE-266--2026-06-11

All 10 known CVE vulnerabilities affecting quest-bot with full Chinese analysis, references, and POCs where available.