Duck-organization Questbot vulnerabilities

• duck-organization questbot Quest Bot: Server Side Request Forgery in the Image to GIF Feature Lets Any Server Member Reach Internal Services CVE-2026-61840 2.3 LowOctober 30, 2026
• duck-organization questbot Quest Bot: Ticket creation has no per-user open-ticket limit or cooldown CVE-2026-49347 5.3 MediumJune 12, 2026
• duck-organization questbot Quest Bot: Stored warn reasons can still trigger bot-powered mass mentions through `/warns`. CVE-2026-48485 2.1 LowJune 12, 2026
• duck-organization questbot Quest Bot: Discord moderation role hierarchy bypass in ban, kick, mute, unmute, warn, and nickname commands CVE-2026-47197 7.2 HighJune 12, 2026
• duck-organization questbot Quest Bot: Per-channel permission overwrite bypass in purge and slowmode commands. CVE-2026-47195 7.1 HighJune 12, 2026
• duck-organization questbot Quest Bot: Empty automod rule causes every guild message to be deleted CVE-2026-47196 8.4 HighJune 12, 2026