Approved changes feed: RSS · Atom

cpe:2.3:a:xithrius:twitch-tui:*:*:*:*:*:rust:*:*

part: a version: * update: *

VendorXithrius (d9ad7ab8-7c2f-58bf-92b3-e7a0833cd944)
ProductTwitch Tui (01424559-ebc1-5c4e-ab35-fd3229ec87a1)
Edition*
Language*
Software edition*
Target softwarerust
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/xithrius/twitch-tui purl2cpe 2026-06-01 10:12:01.291405

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38688 vulnerable 2026-06-08 06:08:18.627888 twitch-tui's connection is not encrypted
HIGH (7.5)
twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.
Published: 2023-08-04T16:18:15.288Z
Updated: 2024-10-09T16:26:21.732Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.