CVE-2019-13045: Irssi

High severity, CVSS 8.1. EPSS: 3.4% chance of exploitation in the next 30 days.

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.

Affected products

• Irssi Irssi: from 0.8.18, before 1.0.8 (fixed in 1.0.8); from 1.1.0, before 1.1.3 (fixed in 1.1.3); from 1.2.0, before 1.2.1 (fixed in 1.2.1)

Published 2019-06-29. Last modified 2026-06-17.