GO-2025-3400 — Vulnetix

GO-2025-3400 PUBLISHED

Matrix Media Repo (MMR) allows untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in github.com/t2bot/matrix-media-repo

Affected Products

Vendor	Product	Versions
github.com	t2bot/matrix-media-repo	0, 0

Timeline

Jan 16, 2025 CVE Published
Mar 3, 2026 CVE Updated

References

https://github.com/t2bot/matrix-media-repo/security/advisories/GHSA-rcxc-wjgw-579r advisory
https://github.com/t2bot/matrix-media-repo/releases/tag/v1.3.8 url

Open in Interactive Console →