What’s Vulnerable › Products

matrix-org matrix-appservice-irc vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your matrix-org matrix-appservice-irc version is affected

Latest matrix-org matrix-appservice-irc vulnerabilities

• CVE-2025-27146 — Matrix IRC Bridge allows IRC command injection to own puppeted user (CVSS 4.3)
• CVE-2024-52505 — matrix-appservice-irc allows IRC Command injection in provisioning API (CVSS 5.4)
• CVE-2024-39691 — Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to (CVSS 4.3)
• CVE-2024-32000 — Truncated content of messages can be leaked from matrix-appservice-irc (CVSS 4.3)
• CVE-2023-38700 — matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms (CVSS 3.7)
• CVE-2023-38690 — matrix-appservice-irc IRC command injection via admin commands containing newlines (CVSS 9.8)
• CVE-2022-3971 — matrix-appservice-irc PgDataStore.ts sql injection (CVSS 5.6)
• CVE-2022-39203 — Parsing issue in matrix-org/node-irc leading to room takeovers (CVSS 8.8)
• CVE-2022-39202 — IRC mode parameter confusion in matrix-appservice-irc (CVSS 6.3)
• CVE-2022-29166 — Improper handling of multiline messages in matrix-appservice-irc (CVSS 8.8)