id: GO-2025-3398
modules:
    - module: github.com/t2bot/matrix-media-repo
      versions:
        - fixed: 1.3.8
      vulnerable_at: 1.3.7
summary: matrix-media-repo (MMR) allows a denial of service through memory exhaustion in github.com/t2bot/matrix-media-repo
cves:
    - CVE-2024-52791
ghsas:
    - GHSA-gp86-q8hg-fpxj
references:
    - advisory: https://github.com/t2bot/matrix-media-repo/security/advisories/GHSA-gp86-q8hg-fpxj
    - web: https://github.com/t2bot/matrix-media-repo/releases/tag/v1.3.8
source:
    id: GHSA-gp86-q8hg-fpxj
    created: 2025-01-16T21:30:55.53433568Z
review_status: UNREVIEWED