High severity7.5NVD Advisory· Published Aug 18, 2022· Updated Jun 17, 2026
CVE-2022-36024
CVE-2022-36024
Description
py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are affected. This issue has been patched in version 2.0.1. There are currently no recommended workarounds - please upgrade to a patched version.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
py-cordPyPI | >= 2.0.0, < 2.0.1 | 2.0.1 |
Affected products
3- Pycord-Development/pycordv5Range: = 2.0.0
- cpe:2.3:a:pycord_development:pycord:2.0.0:*:*:*:*:discord:*:*
Patches
Vulnerability mechanics
References
5- github.com/Pycord-Development/pycord/pull/1568nvdPatchThird Party AdvisoryWEB
- github.com/Pycord-Development/pycord/security/advisories/GHSA-qmhj-m29v-gvmrnvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-qmhj-m29v-gvmrghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-36024ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/py-cord/PYSEC-2022-43146.yamlghsaWEB
News mentions
0No linked articles in our index yet.