p PatchFirst

PatchFirst · Latest vulnerabilities

commandkit vulnerabilities

Vulnerabilities published for commandkit in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-62378

    Medium · CVSS 6.1EPSS 0.16%Fix available

    CommandKit exposes incorrect command name in context object for message command aliases

    CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value reflects the alias rather than the canonical command name. This occurs in both middleware functions and within the command's own run function. Although not explicitly documented, CommandKit's examples and guidance around middleware usage implicitly convey that ctx

    • Update to 1.2.0-rc.12
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →