Pycord Development Pycord 2.0.0 for Discord
Approved changes feed: RSS · Atom
cpe:2.3:a:pycord_development:pycord:2.0.0:*:*:*:*:discord:*:*part: a version: 2.0.0 update: *
| Vendor | Pycord Development (b3a7bd11-9af7-5a68-b643-f6d33d2eb841) |
|---|---|
| Product | Pycord (aab48e39-0c0b-54a3-974f-888bdf347cb1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | discord |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/pycord-development/pycord |
purl2cpe | 2026-06-01 10:13:15.087004 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-36024 |
vulnerable | 2026-06-08 05:46:06.171135 |
Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution
HIGH (7.5)
py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that all public bots that use slash commands are affected. This issue has been patched in version 2.0.1. There are currently no recommended workarounds - please upgrade to a patched version.
Published: 2022-08-18T14:45:17.000Z
Updated: 2025-04-23T17:49:06.683Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.