Cocotais vulnerabilities
We track 1 vulnerability in Cocotais products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 17, 2025.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Cocotais vulnerabilities
- 7.2 High severity
cocotais-bot: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Cocotais Bot is a QQ official robot framework based on qq-bot-sdk. Starting in version 1.5.0-test2-hotfix and prior to version 1.6.2, command echoing feature in the framework allows users to indirectly trigger privileged behavior by injecting special platform