Matrix Media Repo (MMR) allows untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in github.com/t2bot/matrix-media-repo
{
"review_status": "UNREVIEWED",
"url": "https://pkg.go.dev/vuln/GO-2025-3400"
}