duck-organization questbot

• CVE-2026-49347 Medium 5.3 Quest Bot: Ticket creation has no per-user open-ticket limit or cooldown 0.3%
• CVE-2026-48485 Low 2.1 Quest Bot: Stored warn reasons can still trigger bot-powered mass mentions through `/warns`. 0.3%
• CVE-2026-47197 High 7.2 Quest Bot: Discord moderation role hierarchy bypass in ban, kick, mute, unmute, warn, and nickname commands 0.3%
• CVE-2026-47195 High 7.1 Quest Bot: Per-channel permission overwrite bypass in purge and slowmode commands. 0.3%
• CVE-2026-47196 High 8.4 Quest Bot: Empty automod rule causes every guild message to be deleted 0.3%