Product by Matrix-org

    Matrix-appservice-irc

    9 known vulnerabilities in Matrix-appservice-irc (Matrix-org), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Matrix-appservice-irc (Matrix-org)
    HighCVE-2022-39203

    Parsing issue in matrix-org/node-irc leading to room takeovers

    also in 1 other product

    		8.8
    HighCVE-2022-29166

    Improper handling of multiline messages in matrix-appservice-irc

    also in 1 other product

    		8.0
    CriticalCVE-2023-38690

    matrix-appservice-irc IRC command injection via admin commands containing newlines

    also in 1 other product

    		5.8
    MediumCVE-2022-39202

    IRC mode parameter confusion in matrix-appservice-irc

    also in 1 other product

    		4.3
    MediumCVE-2024-52505

    matrix-appservice-irc allows IRC Command injection in provisioning API

    		5.4
    MediumCVE-2024-39691

    Matrix-org Matrix-appservice-irc: Improper Handling of Insufficient Permissions or Privileges

    		4.3
    LowCVE-2023-38700

    Matrix-org Matrix-appservice-irc: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		3.5
    MediumCVE-2024-32000

    Truncated content of messages can be leaked from matrix-appservice-irc

    		4.3
    MediumCVE-2025-27146

    Matrix IRC Bridge allows IRC command injection to own puppeted user

    also in 1 other product

    		2.7

    All products by Matrix-org