https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T15:40:23.255024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-36024 CVE-2022-36024 — Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution 2026-10-24T15:40:23.256792+00:00

Affected: Pycord-Development pycord

py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that all public bots that use slash commands are affected. This issue has been patched in version 2.0.1. There are currently no recommended workarounds - please upgrade to a patched version.

 https://cve.radiocsirt.org/vuln/ghsa-qmhj-m29v-gvmr GHSA-qmhj-m29v-gvmr — Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution 2026-10-24T15:40:23.256846+00:00

Affected: PyPI: py-cord

### Impact py-cord is a an API wrapper for Discord written in Python. Bots using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that all public bots that use slash commands are affected.

### Patches This issue has been patched in version 2.0.1.

### Workarounds There are currently no recommended workarounds - please upgrade to a patched version.

### References https://github.com/Pycord-Development/pycord/pull/1568

### For more information If you have any questions or comments about this advisory: * Open an issue in [our GitHub](https://github.com/Pycord-Development/pycord) * Email us at [support@pycord.dev](mailto:support@pycord.dev)