limit automatic replies
It seems that lightIRC has no flood control for automatic messages like CTCP replies. I've sent 20 CTCP VERSION requests at once to a lightIRC client which got replied instantly. Maybe a malicious user with some clones could make a lightIRC user flood itself of the server.
A limit of 3 CTCP replies per minute should be enough.