t2bot/matrix-media-repo Security Advisories | GitStock

medium2025-01-16

Matrix Media Repo (MMR) allows untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders

GHSA-rcxc-wjgw-579r · CVE-2024-56515

medium2025-01-16

Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federation

GHSA-r6jg-jfv6-2fjv · CVE-2024-52602

medium2025-01-16

matrix-media-repo (MMR) allows a denial of service through memory exhaustion

GHSA-gp86-q8hg-fpxj · CVE-2024-52791

medium2025-01-16

matrix-media-repo (MMR) allows denial of service/high operating costs through unauthenticated downloads

GHSA-vc2m-hw89-qjxf · CVE-2024-36403

medium2025-01-16

matrix-media-repo (MMR) allows unauthenticated writes to the media repository, which may allow planting of problematic content

GHSA-8vmr-h7h5-cqhg · CVE-2024-36402