The most current release and releases within the last 6 weeks are supported.
Please report vulnerabilities through t2bot.io's Security Disclosure Policy
Security: t2bot/matrix-media-repo
Security
SECURITY.md
-
Untrusted file formats can be thumbnailed, invoking potentially further untrusted decodersGHSA-rcxc-wjgw-579r published
Jan 16, 2025 by turt2liveModerate -
Denial of service through memory exhaustionGHSA-gp86-q8hg-fpxj published
Jan 16, 2025 by turt2liveModerate -
Server-Side Request Forgery (SSRF) on redirects and federationGHSA-r6jg-jfv6-2fjv published
Jan 16, 2025 by turt2liveModerate -
Unauthenticated writes to the media repository allow planting of problematic contentGHSA-8vmr-h7h5-cqhg published
Jan 16, 2025 by turt2liveModerate -
Denial of service/high operating costs through unauthenticated downloadsGHSA-vc2m-hw89-qjxf published
Jan 16, 2025 by turt2liveModerate -
Unsafe media served inline on download endpointsGHSA-5crw-6j7v-xc72 published
Sep 8, 2023 by turt2liveModerate -
Denial of service through memory exhaustionGHSA-j889-h476-hh9h published
Apr 19, 2021 by turt2liveModerate
Learn more about advisories related to t2bot/matrix-media-repo in the GitHub Advisory Database