Visit Website →

Recent Items

CVE-2025-62378 — CommandKit exposes incorrect command name in context object for message command aliases

Affected: underctrl-io commandkit

CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value reflects the alias rather than the canonical command …