CVE-2021-37697: Tmerc-Cogs Project Tmerc-Cogs

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message. Issue is patched in commit d63c49b4cfc30c795336e4fff08cba3795e0fcc0. As a workaround users may unload the Welcome cog.

Affected products

• Tmerc-Cogs Project Tmerc-Cogs: before 3.0 (fixed in 3.0)

Published 2021-08-11. Last modified 2026-06-17.