npm/matrix-org-irc: high 8
Improper handling of multiline messages in node-irc
Action: Upgrade matrix-org-irc to 1.2.1 or later.
npm i matrix-org-irc@1.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.1 | - |
Fixed versions
| 1.2.1 |
Sources
- osv: GHSA-52rh-5rpj-c3w6
- https://github.com/matrix-org/node-irc/security/advisories/GHSA-52rh-5rpj-c3w6
- https://nvd.nist.gov/vuln/detail/CVE-2022-29166
- https://github.com/matrix-org/node-irc/commit/2976c856df37660a9d664e94c857c796de2e34f7
- https://github.com/matrix-org/node-irc/commit/e3eb9c15f8240e9c92365f5ffc3944469229771b
- https://github.com/matrix-org/node-irc
- https://matrix.org/blog/2022/05/04/0-34-0-security-release-for-matrix-appservice-irc-high-severity
published · modified · JSON