MEDIUM5.3Go
GHSA-8vmr-h7h5-cqhg· CVE-2024-36402, GO-2025-3397matrix-media-repo (MMR) allows unauthenticated writes to the media repository, which may allow planting of problematic content
Modified: 8/20/2025
package
Go/github.com/t2bot/matrix-media-repo
pkg:go/github.com/t2bot/matrix-media-repo
MEDIUM5.3Go
GHSA-gp86-q8hg-fpxj· CVE-2024-52791, GO-2025-3398matrix-media-repo (MMR) allows a denial of service through memory exhaustion
Modified: 8/20/2025
MEDIUM5.0Go
GHSA-r6jg-jfv6-2fjv· CVE-2024-52602, GO-2025-3399Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federation
Modified: 8/20/2025
MEDIUM6.8Go
GHSA-rcxc-wjgw-579r· CVE-2024-56515, GO-2025-3400Matrix Media Repo (MMR) allows untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders
Modified: 8/20/2025
MEDIUM5.3Go
GHSA-vc2m-hw89-qjxf· CVE-2024-36403, GO-2025-3401matrix-media-repo (MMR) allows denial of service/high operating costs through unauthenticated downloads
Modified: 1/17/2025
—Go
GO-2025-3397· CVE-2024-36402, GHSA-8vmr-h7h5-cqhgmatrix-media-repo (MMR) allows unauthenticated writes to the media repository, which may allow planting of problematic content in github.com/t2bot/matrix-media-repo
Modified: 3/3/2026
—Go
GO-2025-3398· CVE-2024-52791, GHSA-gp86-q8hg-fpxjmatrix-media-repo (MMR) allows a denial of service through memory exhaustion in github.com/t2bot/matrix-media-repo
Modified: 3/3/2026
—Go
GO-2025-3399· CVE-2024-52602, GHSA-r6jg-jfv6-2fjvMatrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federation in github.com/t2bot/matrix-media-repo
Modified: 3/3/2026
—Go
GO-2025-3400· CVE-2024-56515, GHSA-rcxc-wjgw-579rMatrix Media Repo (MMR) allows untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in github.com/t2bot/matrix-media-repo
Modified: 3/3/2026
—Go
GO-2025-3401· CVE-2024-36403, GHSA-vc2m-hw89-qjxfmatrix-media-repo (MMR) allows denial of service/high operating costs through unauthenticated downloads in github.com/t2bot/matrix-media-repo
Modified: 3/3/2026