All products

github.com/t2bot/matrix-media-repo

Go · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
matrix-media-repo (MMR) allows unauthenticated writes to the media repository, which may allow planting of problematic contentCVE-2024-36402 · GHSA-8VMR-H7H5-CQHGVersion ranges need review. github.com/t2bot/matrix-media-repo Go Medium Fix reported
Matrix Media Repo (MMR) allows untrusted file formats can be thumbnailed, invoking potentially further untrusted decodersCVE-2024-56515 · GHSA-RCXC-WJGW-579RVersion ranges need review. github.com/t2bot/matrix-media-repo Go Medium Fix reported
matrix-media-repo (MMR) allows denial of service/high operating costs through unauthenticated downloadsCVE-2024-36403 · GHSA-VC2M-HW89-QJXFVersion ranges need review. github.com/t2bot/matrix-media-repo Go Medium Fix reported
matrix-media-repo (MMR) allows a denial of service through memory exhaustionCVE-2024-52791 · GHSA-GP86-Q8HG-FPXJVersion ranges need review. github.com/t2bot/matrix-media-repo Go Medium Fix reported
Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federationCVE-2024-52602 · GHSA-R6JG-JFV6-2FJVVersion ranges need review. github.com/t2bot/matrix-media-repo Go Medium Fix reported