https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 00:01:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-192000 EUVD-2026-192000 https://cve.radiocsirt.org/vuln/euvd-2026-192000 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38700 <p>matrix-appservice-irc is a Node.js IRC bridge for Matrix. Prior to version 1.0.1, it was possible to craft an event such that it would leak part of a targeted message event from another bridged room. This required knowing an event ID to target. Version 1.0.1n fixes this issue. As a workaround, set the `matrixHandler.eventCacheSize` config value to `0`. This workaround may impact performance.</p> <p>matrix-appservice-irc is a Node.js IRC bridge for Matrix. Prior to version 1.0.1, it was possible to craft an event such that it would leak part of a targeted message event from another bridged room. This required knowing an event ID to target. Version 1.0.1n fixes this issue. As a workaround, set the `matrixHandler.eventCacheSize` config value to `0`. This workaround may impact performance.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38700 https://cve.radiocsirt.org/vuln/ghsa-c7hh-3v6c-fj4q <p><strong>Affected:</strong> npm: matrix-appservice-irc</p> <p>### Impact</p> <p>It was possible to craft an event such that it would leak part of a targeted message event from another bridged room. This required knowing an event ID to target.</p> <p>### Patches</p> <p>Please upgrade to 1.0.1.</p> <p>### Workarounds</p> <p>You can set the `matrixHandler.eventCacheSize` config value to `0` to workaround this bug. However, this may impact performance.</p> <p>### Credits</p> <p>Discovered and reported by [Val Lorentz](https://valentin-lorentz.fr/).</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory email us at [security@matrix.org](mailto:security@matrix.org).</p> <p><strong>Affected:</strong> npm: matrix-appservice-irc</p> <p>### Impact</p> <p>It was possible to craft an event such that it would leak part of a targeted message event from another bridged room. This required knowing an event ID to target.</p> <p>### Patches</p> <p>Please upgrade to 1.0.1.</p> <p>### Workarounds</p> <p>You can set the `matrixHandler.eventCacheSize` config value to `0` to workaround this bug. However, this may impact performance.</p> <p>### Credits</p> <p>Discovered and reported by [Val Lorentz](https://valentin-lorentz.fr/).</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory email us at [security@matrix.org](mailto:security@matrix.org).</p> https://cve.radiocsirt.org/vuln/ghsa-c7hh-3v6c-fj4q https://cve.radiocsirt.org/vuln/gsd-2023-38700 gsd-2023-38700 https://cve.radiocsirt.org/vuln/gsd-2023-38700