CVE-2022-3971
1 advisory.
npm/matrix-appservice-irc CVE-2022-3971: medium 5.6
Matrix-appservice-irc vulnerable to sql injection via roomIds argument
Action: Upgrade matrix-appservice-irc to 0.36.0 or later.
npm i matrix-appservice-irc@0.36.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.36.0 | - |
Fixed versions
| 0.36.0 |
Sources
- osv: GHSA-ffwf-47x2-jpr8
- https://nvd.nist.gov/vuln/detail/CVE-2022-3971
- https://github.com/matrix-org/matrix-appservice-irc/pull/1619
- https://github.com/matrix-org/matrix-appservice-irc/commit/179313a37f06b298150edba3e2b0e5a73c1415e7
- https://github.com/matrix-org/matrix-appservice-irc
- https://github.com/matrix-org/matrix-appservice-irc/releases/tag/0.36.0
- https://vuldb.com/?id.213550
CVE-2022-3971 · published · modified · JSON