How many matrix-org matrix irc bridge CVEs are in CISA KEV?

None of matrix-org matrix irc bridge's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of matrix-org matrix irc bridge are affected?

9 distinct matrix-org matrix irc bridge versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in matrix-org matrix irc bridge CVEs?

matrix-org matrix irc bridge's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-707 (Improper Neutralization).

How many critical matrix-org matrix irc bridge vulnerabilities are there?

matrix-org matrix irc bridge has 1 critical and 2 high-severity CVEs.

What is the average severity of matrix-org matrix irc bridge CVEs?

The average CVSS base score across matrix-org matrix irc bridge's scored CVEs is 6.8.

RadicalNotion.AI

Log in Create an account

matrix-org

7 CVEs

matrix-org matrix irc bridge Vulnerabilities

Name: matrix-org matrix irc bridge vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for matrix irc bridge by matrix-org.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.8

Avg CVSS

2022–2025

Last updated February 25, 2025

Overview

matrix-org matrix irc bridge has 7 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

Severity and exploitation

How the CVSS severity of matrix-org matrix irc bridge's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium3

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of matrix-org matrix irc bridge's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No matrix-org matrix irc bridge CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every matrix-org matrix irc bridge version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.35.02 CVEs
< 1.0.12 CVEs
< 0.33.21 CVE
< 3.0.41 CVE
<= 0.36.01 CVE

Fixed in

0.35.02 CVEs
1.0.12 CVEs
0.33.21 CVE
3.0.41 CVE

Find a version

7 CVEs

Sort

Matrix IRC Bridge allows IRC command injection to own puppeted user
CVE-2025-27146
Patch
CWE-77
Medium · CVSS 4.3
EPSS 0.4% (32th pct)2025-02-25
matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
CVE-2023-38700
Patch
CWE-200
Low · CVSS 3.7
EPSS 0.6% (48th pct)2023-08-04
matrix-appservice-irc IRC command injection via admin commands containing newlines
CVE-2023-38690
Patch
CWE-20
Critical · CVSS 9.8
EPSS 0.9% (58th pct)2023-08-04
Matrix-appservice-irc vulnerable to sql injection via roomIds argument
CVE-2022-3971
Patch
CWE-707
Medium · CVSS 5.6
EPSS 0.6% (45th pct)2022-11-13
Parsing issue in matrix-org/node-irc leading to room takeovers
CVE-2022-39203
Patch
CWE-269
High · CVSS 8.8
EPSS 0.9% (58th pct)2022-09-13
matrix-appservice-irc vulnerable to IRC mode parameter confusion
CVE-2022-39202
Patch
CWE-269
Medium · CVSS 6.3
EPSS 0.9% (58th pct)2022-09-13
Improper handling of multiline messages in node-irc affects matrix-appservice-irc
CVE-2022-29166
Patch
CWE-74
High · CVSS 8.8
EPSS 1.0% (62th pct)2022-05-05

Common weakness types

The CWE weakness categories most often found in matrix-org matrix irc bridge CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many matrix-org matrix irc bridge CVEs were published each year.

2022

4

2023

2

2025

1

Other matrix-org products

Browse vulnerabilities for other products by matrix-org.

synapse40 CVEs matrix-synapse31 CVEs matrix-js-sdk13 CVEs javascript sdk10 CVEs matrix-appservice-irc10 CVEs matrix-rust-sdk10 CVEs matrix-react-sdk8 CVEs matrix-spec-proposals8 CVEs

All matrix-org vulnerabilities

Frequently asked questions

Common questions about matrix-org matrix irc bridge vulnerabilities.

How many CVEs does matrix-org matrix irc bridge have?: matrix-org matrix irc bridge has 7 published CVE records since 2022.
How many matrix-org matrix irc bridge CVEs are in CISA KEV?: None of matrix-org matrix irc bridge's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for matrix-org matrix irc bridge vulnerabilities?: No matrix-org matrix irc bridge CVEs currently have a tracked public exploit in this dataset.
Which versions of matrix-org matrix irc bridge are affected?: 9 distinct matrix-org matrix irc bridge versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in matrix-org matrix irc bridge CVEs?: matrix-org matrix irc bridge's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-707 (Improper Neutralization).
How many critical matrix-org matrix irc bridge vulnerabilities are there?: matrix-org matrix irc bridge has 1 critical and 2 high-severity CVEs.
What is the average severity of matrix-org matrix irc bridge CVEs?: The average CVSS base score across matrix-org matrix irc bridge's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track matrix-org matrix irc bridge vulnerabilities

Get an alert for each new matrix-org matrix irc bridge CVE, with AI-written analysis and remediation steps.

Create an account See pricing