net.dv8tion vulnerabilities

Products

• net.dv8tion/JDA 1

Latest net.dv8tion CVEs

Newest publication first

1. GHSA-93fv-4pm9-xp28 JDA (Java Discord API) downloads external URLs when updating message components

   Published 2025-12-09

   Medium·CVSS 6.9

   Impact Anyone using untrusted message components may be affected. On versions >=6.0.0,<6.1.3 of JDA, the requester will attempt to download external media URLs from components if they are used in an update or send request. If you are used Message#getComponents or similar to get a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.