Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/t2bot/matrix-media-repo

5 known vulnerabilities (5 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 5 medium
Registry
pkg.go.dev

Advisories 5

  • CVE-2024-36402Medium 5.3

    Unauthenticated writes to the media repository allow planting of problematic content in Matrix Media Repo

    Affected: fixed in 1.3.5.

  • CVE-2024-36403Medium 5.3

    Denial of service/high operating costs through unauthenticated downloads in Matrix Media Repo

    Affected: fixed in 1.3.5.

  • CVE-2024-52602Medium 5.0

    Server-Side Request Forgery (SSRF) on redirects and federation in Matrix Media Repo

    Affected: fixed in 1.3.8.

  • CVE-2024-52791Medium 5.3

    Denial of service through memory exhaustion in Matrix Media Repo

    Affected: fixed in 1.3.8.

  • CVE-2024-56515Medium 6.8

    Untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in Matrix Media Repo

    Affected: fixed in 1.3.8.