PT-2026-48718 · Discord · Quest-Bot

CVE-2026-47188

·

Published

2026-06-11

·

Updated

2026-06-13

CVSS v4.0

2.3

Low

VectorAV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Quest Bot versions prior to 1.0.5
Description Quest Bot is an open-source Discord Bot designed for moderation, utilities, and support. The bot fails to suppress mentions in the '/unban' and '/unwarn' endpoints, allowing user-controlled reason text to be echoed in public messages without the allowedMentions restriction. This allows a moderator to include @everyone or @here in the reason, causing the bot to trigger a mass ping.
Recommendations Update to version 1.0.5.

Exploit

Fix

Improper Encoding or Escaping of Output

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-116

Related Identifiers

CVE-2026-47188
GHSA-R978-QQG9-VVXW

Affected Products

Quest-Bot