TI-2023-20039 CVE-2023-38690 · GHSA-3pmj-jqqp-2mj3
matrix-appservice-irc IRC command injection via admin commands containing newlines
Priority MEDIUM 50
matrix-appservice-irc is a Node.js IRC bridge for Matrix.
matrix-org
Records116All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9
Exploited now
matrix-org records in CISA KEVNo matrix-org vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Matrix Irc Bridge · all components
TI-2022-18583 CVE-2022-39203 · GHSA-xvqg-mv25-rwvw
Parsing issue in matrix-org/node-irc leading to room takeovers
Priority MEDIUM 42
matrix-appservice-irc is an open source Node.js IRC bridge for Matrix.
TI-2022-11710 CVE-2022-29166 · GHSA-37hr-348p-rmf4
Improper handling of multiline messages in matrix-appservice-irc
Priority MEDIUM 42
matrix-appservice-irc is a Node.js IRC bridge for Matrix.
TI-2022-18582 CVE-2022-39202 · GHSA-cq7q-5c67-w39w
IRC mode parameter confusion in matrix-appservice-irc
Priority LOW 30
matrix-appservice-irc is an open source Node.js IRC bridge for Matrix.
TI-2022-03640 CVE-2022-3971 · GHSA-ffwf-47x2-jpr8
matrix-appservice-irc PgDataStore.ts sql injection
Priority LOW 26
A vulnerability was found in matrix-appservice-irc up to 0.35.1.
TI-2025-20003 CVE-2025-27146 · GHSA-5mvm-89c9-9gm5
Matrix IRC Bridge allows IRC command injection to own puppeted user
Priority LOW 20
matrix-appservice-irc is a Node.js IRC bridge for Matrix.
TI-2023-20048 CVE-2023-38700 · GHSA-c7hh-3v6c-fj4q
matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
Priority LOW 19
matrix-appservice-irc is a Node.js IRC bridge for Matrix.