Skip to content
OpenAdvisories

Package · npm

matrix-appservice-irc

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2022-39203

    Parsing issue in matrix-org/node-irc leading to room takeovers

    matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves pe…

    Matrix matrix-appservice-irc matrix-appservice-irc npm
  • High 8.0
    CVE-2022-29166

    Improper handling of multiline messages in matrix-appservice-irc

    matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. The vulnerability has been patched in mat…

    Matrix matrix-appservice-irc matrix-appservice-irc npm