https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:16:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-194328 EUVD-2026-194328 https://cve.radiocsirt.org/vuln/euvd-2026-194328 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38688 <p>twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.</p> <p>twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38688 https://cve.radiocsirt.org/vuln/ghsa-779w-xvpm-78jx <p><strong>Affected:</strong> crates.io: twitch-tui</p> <p>### Summary The connection is not using TLS for communication</p> <p>### Details In the configuration of the irc connection, [you are disabling tls](https://github.com/Xithrius/twitch-tui/blob/340afc3c8c07a83289fe6ef614aa7563c8b70756/src/twitch/connection.rs#L23) which makes all communication to twitch irc servers unencrypted.</p> <p>### PoC You can verify by using tcpdump/wireshark that traffic is unencrypted.</p> <p>### Impact Communication can be sniffed, even auth tokens.</p> <p><strong>Affected:</strong> crates.io: twitch-tui</p> <p>### Summary The connection is not using TLS for communication</p> <p>### Details In the configuration of the irc connection, [you are disabling tls](https://github.com/Xithrius/twitch-tui/blob/340afc3c8c07a83289fe6ef614aa7563c8b70756/src/twitch/connection.rs#L23) which makes all communication to twitch irc servers unencrypted.</p> <p>### PoC You can verify by using tcpdump/wireshark that traffic is unencrypted.</p> <p>### Impact Communication can be sniffed, even auth tokens.</p> https://cve.radiocsirt.org/vuln/ghsa-779w-xvpm-78jx https://cve.radiocsirt.org/vuln/gsd-2023-38688 gsd-2023-38688 https://cve.radiocsirt.org/vuln/gsd-2023-38688