CVE-2024-32000

npm/matrix-appservice-irc CVE-2024-32000: medium 4.3

Matrix IRC Bridge truncated content of messages can be leaked

Action: Upgrade matrix-appservice-irc to 2.0.0 or later.

npm i matrix-appservice-irc@2.0.0

Affected

Fixed versions

Sources

• osv: GHSA-wm4w-7h2q-3pf7
• https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-wm4w-7h2q-3pf7
• https://nvd.nist.gov/vuln/detail/CVE-2024-32000
• https://github.com/matrix-org/matrix-appservice-irc/pull/1799
• https://github.com/matrix-org/matrix-appservice-irc/commit/4af7d3009f10b1f2fb810784c1e491d9d3bee82b
• https://github.com/matrix-org/matrix-appservice-irc
• https://github.com/matrix-org/matrix-appservice-irc/blob/d5d67d1d3ea3f0f6962a0af2cc57b56af3ad2129/config.sample.yaml#L601-L604

CVE-2024-32000 · published 2024-04-11T20:17:49Z · modified 2026-09-10T03:50:00.260867978Z · JSON