Impact

A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message.

Patches

Issue is patched in commit d63c49b.

Workarounds

Unload the Welcome cog.

For more information

If you have any questions or comments about this advisory:

• Start a new discussion in the tmerc-cogs repository.
• Join my channel in the cog support Discord server and ask there.