{"action":"Upgrade matrix-appservice-irc to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"matrix-appservice-irc","cve_ids":["CVE-2024-39691"],"ecosystem":"npm","epss":0.00498,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-w9mh-5x8j-9754","id":"tcs_01M5KGEP1M8XY1M1RJ8PZ8M2SP","modified_at":"2026-09-10T03:50:16.894989056Z","published_at":"2024-07-05T20:06:06Z","references":["https://osv.dev/vulnerability/GHSA-w9mh-5x8j-9754","https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-w9mh-5x8j-9754","https://nvd.nist.gov/vuln/detail/CVE-2024-39691","https://github.com/matrix-org/matrix-appservice-irc/pull/1804","https://github.com/matrix-org/matrix-appservice-irc/commit/1835e047f269001054be4c68867797aa12372a0f","https://github.com/matrix-org/matrix-appservice-irc","https://github.com/matrix-org/matrix-appservice-irc/blob/d5d67d1d3ea3f0f6962a0af2cc57b56af3ad2129/config.sample.yaml#L601-L604"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-w9mh-5x8j-9754","url":"https://osv.dev/vulnerability/GHSA-w9mh-5x8j-9754"}],"summary":"Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to"}