CVE-2021-37696: Tmerc-Cogs Project Tmerc-Cogs

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific MassDM message. Issue is patched in commit 92325be650a6c17940cc52611797533ed95dbbe1. All users are advised to update to the current commit. As a workaround users may unload the MassDM cog or globally disable the `[p]massdm` command.

Affected products

• Tmerc-Cogs Project Tmerc-Cogs: before 3.0 (fixed in 3.0)

Published 2021-08-11. Last modified 2026-06-17.