Vulnerabilities

TI-2025-20003 CVE-2025-27146 · GHSA-5mvm-89c9-9gm5

Matrix IRC Bridge allows IRC command injection to own puppeted user

LOW 20

matrix-appservice-irc is a Node.js IRC bridge for Matrix.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00396 Published 2025-02-25 Fixed in 3.0.4 CWE-77

TI-2023-20048 CVE-2023-38700 · GHSA-c7hh-3v6c-fj4q

LOW 19

matrix-appservice-irc is a Node.js IRC bridge for Matrix.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00599 Published 2023-08-04 Fixed in 1.0.1 CWE-200

TI-2023-20039 CVE-2023-38690 · GHSA-3pmj-jqqp-2mj3

MEDIUM 50

matrix-appservice-irc is a Node.js IRC bridge for Matrix.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00863 Published 2023-08-04 Fixed in 1.0.1 CWE-20

TI-2022-03640 CVE-2022-3971 · GHSA-ffwf-47x2-jpr8

LOW 26

A vulnerability was found in matrix-appservice-irc up to 0.35.1.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00572 Published 2022-11-13 Fixed in 0.36.0 CWE-707

TI-2022-18583 CVE-2022-39203 · GHSA-xvqg-mv25-rwvw

MEDIUM 42

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00882 Published 2022-09-13 Fixed in 0.35.0 CWE-269

TI-2022-18582 CVE-2022-39202 · GHSA-cq7q-5c67-w39w

LOW 30

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00898 Published 2022-09-13 Fixed in 0.35.0 CWE-269

TI-2022-11710 CVE-2022-29166 · GHSA-37hr-348p-rmf4

MEDIUM 42

matrix-appservice-irc is a Node.js IRC bridge for Matrix.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01005 Published 2022-05-05 Fixed in 0.34.0, 0.33.2 CWE-74