When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "irssi", "binary_version": "0.8.15-5ubuntu3.4" }, { "binary_name": "irssi-dev", "binary_version": "0.8.15-5ubuntu3.4" } ] }
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-5205.json"
{ "availability": "No subscription required", "binaries": [ { "binary_name": "irssi", "binary_version": "0.8.19-1ubuntu1.6" }, { "binary_name": "irssi-dev", "binary_version": "0.8.19-1ubuntu1.6" } ] }