CVE-2021-37697

    Dashboard / Vulnerabilities / CVE-2021-37697

    CVE-2021-37697

    Published: 11 Aug 2021Last Modified: 8 Jul 2026

    Summary:

    Details: tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message. Issue is patched in commit d63c49b4cfc30c795336e4fff08cba3795e0fcc0. As a workaround users may unload the Welcome cog.

    References: https://github.com/tmercswims/tmerc-cogs/commit/d63c49b4cfc30c795336e4fff08cba3795e0fcc0, https://github.com/tmercswims/tmerc-cogs/security/advisories/GHSA-77xv-8c2x-j96j

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d63c49b4cfc30c795336e4fff08cba3795e0fcc0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-37697 | CVE-DB