Skip to content
OpenAdvisories

Package · npm

matrix-org-irc

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.0

    Improper handling of multiline messages in node-irc

    node-irc is a socket wrapper for the IRC protocol that extends Node.js' EventEmitter. The vulnerability allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. Incorrect handling of a C…