Most recent entries from all

EUVD-2026-215232

2026-10-03T03:33:35.405559+00:00

EUVD-2026-215232

fkie_cve-2024-52602

2026-10-03T03:33:35.405593+00:00

Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix. Matrix Media Repo (MMR) is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. This is fixed in MMR v1.3.8. Users are advised to upgrade. Restricting which hosts MMR is allowed to contact via (local) firewall rules or a transparent proxy and may provide a workaround for users unable to upgrade.

GHSA-r6jg-jfv6-2fjv — Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federation

2026-10-03T03:33:35.405626+00:00

Affected: Go: github.com/t2bot/matrix-media-repo

### Impact Matrix Media Repo (MMR) is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions.

### Patches This is fixed in [MMR v1.3.8](https://github.com/t2bot/matrix-media-repo/releases/tag/v1.3.8).

### Workarounds Restricting which hosts MMR is allowed to contact via (local) firewall rules or a transparent proxy.

### References https://owasp.org/www-community/attacks/Server_Side_Request_Forgery https://learn.snyk.io/lesson/ssrf-server-side-request-forgery/ https://www.agwa.name/blog/post/preventing_server_side_request_forgery_in_golang

openSUSE-SU-2025:14704-1 — govulncheck-vulndb-0.0.20250117T214834-1.1 on GA media

2026-10-03T03:33:35.405657+00:00

govulncheck-vulndb-0.0.20250117T214834-1.1 on GA media

SUSE-SU-2025:0297-1 — Security update for govulncheck-vulndb

2026-10-03T03:33:35.405682+00:00

Security update for govulncheck-vulndb