CVE-2026-47196

Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user input but does not reject an empty result. Adding a rule containing only whitespace stores an empty word. The message listener later checks content.includes(""), which is always true, causing the bot to delete every non-bot guild message. This issue has been patched in version 1.1.6.

• CWE-20

• https://github.com/duck-organization/questbot/releases/tag/questbot-v1.1.6
• https://github.com/duck-organization/questbot/security/advisories/GHSA-fgwg-6px5-cxp5
• https://github.com/duck-organization/questbot/security/advisories/GHSA-fgwg-6px5-cxp5

Published

Jun 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-47189Quest Bot is an opensource modern Discord Bot built for mode…8.3
• CVE-2026-4719Incorrect boundary conditions in the Graphics: Text componen…7.5
• CVE-2026-47190IPAM is the IP address Manager for Cluster API Provider Meta…4.4
• CVE-2026-47193OpenProject is open-source, web-based project management sof…7.5
• CVE-2026-47194Frappe is a full-stack web application framework. Prior to 1…8.6
• CVE-2026-47195Quest Bot is an opensource Discord Bot. Prior to version 1.1…7.1
• CVE-2026-47197Quest Bot is an opensource Discord Bot. Prior to version 1.1…7.2
• CVE-2026-47198Paymenter is a free and open-source webshop solution for man…8.5
• CVE-2026-47199Frappe is a full-stack web application framework. Prior to 1…2.3
• CVE-2026-4720Memory safety bugs present in Firefox ESR 140.8, Thunderbird…9.8
• CVE-2026-47200Nuxt is an open-source web development framework for Vue.js.…5.3
• CVE-2026-47201authentik is an open-source identity provider. Prior to vers…8.5