Approved changes feed: RSS · Atom

cpe:2.3:a:tmerc-cogs_project:tmerc-cogs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTmerc Cogs Project (b73857b9-9fc5-5283-958c-3dd60c0be4a6)
ProductTmerc Cogs (d5532e1f-2de3-5055-9acc-a1f2c73ef418)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/tmercswims/tmerc-cogs purl2cpe 2026-06-01 10:13:43.132116

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-37697 vulnerable 2026-06-08 05:32:54.620487 Sensitive information leak in Welcome of tmerc-cogs
HIGH (7.1)
tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message. Issue is patched in commit d63c49b4cfc30c795336e4fff08cba3795e0fcc0. As a workaround users may unload the Welcome cog.
Published: 2021-08-11T23:00:11.000Z
Updated: 2024-08-04T01:23:01.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37696 vulnerable 2026-06-08 05:32:54.620011 Sensitive information leak in MassDM of tmerc-cogs
HIGH (7.1)
tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific MassDM message. Issue is patched in commit 92325be650a6c17940cc52611797533ed95dbbe1. All users are advised to update to the current commit. As a workaround users may unload the MassDM cog or globally disable the `[p]massdm` command.
Published: 2021-08-11T22:55:09.000Z
Updated: 2024-08-04T01:23:01.525Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.