Most severe vulnerabilities for "matrix matrix irc bridge node.js"

Where

Sort:

Versions

0.36.0

matrix Matrix Irc Bridge Node.jsmatrix-appservice-irc PgDataStore.ts sql injection

Risk 42

Severity

5.6

SQL Injection

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in matrix-appservice-irc up to 0.35.1. It has been declared as critical. This vulnerability affects unknown code of the file src/datastore/postgres/PgDataStore.ts. The manipulation of the argument roomIds leads to sql injection. Upgrading to version 0.36.0 is able to address this issue. The name of the patch is 179313a37f06b298150edba3e2b0e5a73c1415e7. It is recommended to upgrade the affected component. VDB-213550 is the identifier assigned to this vulnerability.

First published (updated )

CVE-2022-3971

npm/matrix-appservice-ircMatrix IRC Bridge allows IRC command injection to own puppeted user

Risk 16

Severity

4.3

EPSS

0.03%

Command Injection

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Impact The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user.

Patches The vulnerability has been patched in matrix-appservice-irc version 3.0.4.

For more information If you have any questions or comments about this advisory, please email us at security at matrix.org.

1 / 2

Source: GitHub

First published (updated )

CVE-2025-27146

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.