CVE-2026-47175

The record

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo user-controlled reason text in public bot replies without disabling mention parsing. A moderator who does not have permission to mention everyone can still make the bot send @everyone or @here if the bot has that permission. This issue has been patched in version 1.0.4.

Affected packages

Related vulnerabilities

• CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. CWE-116
• CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. CWE-116
• CVE-2026-113725 virtualenv is a tool for creating isolated virtual python environments. CWE-116
• CVE-2026-104250 The unstructured library provides open-source components for ingesting and pre-processing… CWE-116
• CVE-2026-107823 MariaDB server is a community developed fork of MySQL server. CWE-116
• CVE-2026-106444 Handlebars provides the power necessary to let users build semantic templates. CWE-116
• CVE-2026-77404 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-116
• CVE-2026-88060 Angular is a development platform for building mobile and desktop web applications using… CWE-116