—
GO-2025-3399
Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federation in github.com/t2bot/matrix-media-repo
Quick fix
GO-2025-3399 — github.com/t2bot/matrix-media-repo: upgrade to the fixed version with the command below.
go get github.com/t2bot/matrix-media-repo@v1.3.8Details
Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federation in github.com/t2bot/matrix-media-repo
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/t2bot/matrix-media-repo
Introduced in:
0Fixed in: 1.3.8Fix
go get github.com/t2bot/matrix-media-repo@v1.3.8