CVE-2026-47175
概要

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo user-controlled reason text in public bot replies without disabling mention parsing. A moderator who does not have permission to mention everyone can still make the bot send @everyone or @here if the bot has that permission. This issue has been patched in version 1.0.4.

公表日 2026年6月12日4:16
登録日 2026年6月13日4:14
最終更新日 2026年6月12日5:58
関連情報、対策とツール
共通脆弱性一覧