CVE-2026-47172 - Quest Bot: Untrusted pull request code can be built and deployed by privileged `workflow_run` deployment.
CVE ID :CVE-2026-47172 Published : June 11, 2026, 7:16 p.m. | 1 hour, 48 minutes ago Description :Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, the repository has a privileged deploy workflow that runs after the unprivileged...