Approved changes feed: RSS · Atom

cpe:2.3:a:pycord-development:pycord:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPycord Development (7e7648f9-de8d-5175-aeb8-e9e7fa5265f7)
ProductPycord (d2f04617-f796-5877-9ae2-4ca28b0157a2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36024 vulnerable 2026-06-08 05:46:06.170426 Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution
HIGH (7.5)
py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that all public bots that use slash commands are affected. This issue has been patched in version 2.0.1. There are currently no recommended workarounds - please upgrade to a patched version.
Published: 2022-08-18T14:45:17.000Z
Updated: 2025-04-23T17:49:06.683Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.