npm/matrix-appservice-irc

Improper handling of multiline messages in node-irc affects matrix-appservice-irc

Modified: 11/8/2023

matrix-appservice-irc IRC command injection via admin commands containing newlines

Modified: 9/10/2026

Matrix IRC Bridge allows IRC command injection to own puppeted user

Modified: 2/25/2025

matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms

Modified: 11/8/2023

matrix-appservice-irc vulnerable to IRC mode parameter confusion

Modified: 11/8/2023

Matrix-appservice-irc vulnerable to sql injection via roomIds argument

Modified: 11/8/2023

Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to

Modified: 9/10/2026

Matrix IRC Bridge truncated content of messages can be leaked

Modified: 9/10/2026

Parsing issue in matrix-org/node-irc leading to room takeovers

Modified: 11/8/2023