Skip to content
OpenAdvisories

Package · npm

thelounge

1 known vulnerabilities.

1 result · Feed

  • Low —

    thelounge may publicly disclose of all usernames/idents via port 113

    Per RFC 1413, The unique identifying tuple includes not only the ports, but also the both addresses. Without the addresses, the information becomes both non-unique and public: - If multiple connections happen to use the same local port number (which is possib…