InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "malformed PONG" issue.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-33586.json"