pypi package report

Is py-cord safe?

1 known vulnerability, worst severity HIGH.

// reach

15 direct dependencies

1 carry known advisories, worst HIGH

6 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage

No published models are known to use this package.

cvss
7.5
high

CVSS v3.1 base score out of 10

epss
0.82%
medium

chance of exploitation in 30 days, 57th percentile of all CVEs

xyz score
4.0
medium

CyberXYZ composite out of 10

fig. 01 — GHSA-qmhj-m29v-gvmr, the advisory selected below

// 1 advisories

GHSA-qmhj-m29v-gvmr

HIGHGitHub ratingCVE-2022-36024
// impact

py-cord is a an API wrapper for Discord written in Python. Bots using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are affected.

// patches

This issue has been patched in version 2.0.1.

// workarounds

There are currently no recommended workarounds - please upgrade to a patched version.

// references

https://github.com/Pycord-Development/pycord/pull/1568

// for more information

If you have any questions or comments about this advisory:

  • Open an issue in our GitHub
  • Email us at [support@pycord.dev](mailto:support@pycord.dev)
// cvss v3.1 vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Checked 2026-11-06 at 22:40 UTC. The most recent advisory here was published 2022-08-18. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.