matrix-org/matrix-appservice-irc Security Advisories | GitStock

low2025-02-25

Matrix IRC Bridge allows IRC command injection to own puppeted user

GHSA-5mvm-89c9-9gm5 · CVE-2025-27146

medium2024-07-05

Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to

GHSA-w9mh-5x8j-9754 · CVE-2024-39691

medium2024-04-11

Matrix IRC Bridge truncated content of messages can be leaked

GHSA-wm4w-7h2q-3pf7 · CVE-2024-32000

medium2023-08-04

matrix-appservice-irc IRC command injection via admin commands containing newlines

GHSA-3pmj-jqqp-2mj3 · CVE-2023-38690

low2023-08-04

matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms

GHSA-c7hh-3v6c-fj4q · CVE-2023-38700

medium2022-11-13

Matrix-appservice-irc vulnerable to sql injection via roomIds argument

GHSA-ffwf-47x2-jpr8 · CVE-2022-3971

medium2022-09-15

matrix-appservice-irc vulnerable to IRC mode parameter confusion

GHSA-cq7q-5c67-w39w · CVE-2022-39202

high2022-09-15

Parsing issue in matrix-org/node-irc leading to room takeovers

GHSA-xvqg-mv25-rwvw · CVE-2022-39203

high2022-05-23

Improper handling of multiline messages in node-irc affects matrix-appservice-irc

GHSA-37hr-348p-rmf4 · CVE-2022-29166