Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:33:28 +0000 CVE-2025-27146 — Matrix IRC Bridge allows IRC command injection to own puppeted user https://cve.radiocsirt.org/vuln/cve-2025-27146 <p><strong>Affected:</strong> matrix-org matrix-appservice-irc</p> <p>matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability has been patched in matrix-appservice-irc version 3.0.4.</p> <p><strong>Affected:</strong> matrix-org matrix-appservice-irc</p> <p>matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains a vulnerability which can lead to arbitrary IRC command execution as the puppeted user. The attacker can only inject commands executed as their own IRC user. The vulnerability has been patched in matrix-appservice-irc version 3.0.4.</p> https://cve.radiocsirt.org/vuln/cve-2025-27146