duck-organization quest-bot vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Latest duck-organization quest-bot vulnerabilities

CVE-2026-47189 — Quest Bot: AutoMod removal can delete rules from another guild by global rule ID (CVSS 8.3)
CVE-2026-47188 — Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions. (CVSS 2.3)
CVE-2026-47177 — Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility channel (CVSS 5.7)
CVE-2026-47176 — Quest Bot: Logging module can disclose private-channel message contents to a lower-visibility log channel (CVSS 5.7)
CVE-2026-47175 — Quest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` pings (CVSS 2.3)
CVE-2026-47173 — Quest Bot: Ticket reason allows mass-mention injection (CVSS 6.3)
CVE-2026-47172 — Quest Bot: Untrusted pull request code can be built and deployed by privileged `workflow_run` deployment. (CVSS 9.5)
CVE-2026-47171 — Quest Bot: Reminder messages allow stored mass mentions through `@everyone` and `@here` (CVSS 8.8)
CVE-2026-47169 — Quest Bot: Manage Server users can configure AutoRole to grant Administrator to controlled joining accounts (CVSS 7.5)
CVE-2026-47163 — Quest Bot: Unprivileged users can create and remove AutoMod rules. (CVSS 7.2)