[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-36402":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T20:55:33.689Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":660,"aliases":661,"duplicate_of":9,"upstream":664,"downstream":665,"duplicates":670,"related":671,"reserved_at":9,"published_at":674,"modified_at":675,"state":676,"summary":677,"references_raw":686,"kevs":716,"epss":717,"epss_history":720,"metrics":983,"affected":994},"CVE-2024-36402","Matrix Media Repo (MMR) is a highly configurable multi-homeserver media repository for Matrix. MMR before version 1.3.5 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the local homeserver in an unauthenticated way. The implication is that unauthenticated remote adversaries can use this functionality to plant problematic content into the media repository. MMR 1.3.5 introduces a partial mitigation in the form of new endpoints which require authentication for media downloads. The unauthenticated endpoints will be frozen in a future release, closing the attack vector. Though extremely limited, server operators can use more strict rate limits based on IP address as a partial workaround.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","weakness","Draft","Class","High",[20,182,261,265,269,273,292,481,543,627],{"id":21,"name":22,"techniques":23},"CAPEC-114","Authentication Abuse",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1548","Abuse Elevation Control Mechanism",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,44,48,52,57,61,65,69,73,77,81,85,89,94,98,103,108,112,116,120,125,129,133,137,141,146,150,154,158,162,166,170,174,178],{"id":36,"name":37,"tactic":38},"D3-CI","Configuration Inventory",{"name":39},"Model",{"id":41,"name":42,"tactic":43},"D3-AM","Access Modeling",{"name":39},{"id":45,"name":46,"tactic":47},"D3-DI","Data Inventory",{"name":39},{"id":49,"name":50,"tactic":51},"D3-NTPM","Network Traffic Policy Mapping",{"name":39},{"id":53,"name":54,"tactic":55},"D3-AEM","Application Exception Monitoring",{"name":56},"Detect",{"id":58,"name":59,"tactic":60},"D3-SCA","System Call Analysis",{"name":56},{"id":62,"name":63,"tactic":64},"D3-SFA","System File Analysis",{"name":56},{"id":66,"name":67,"tactic":68},"D3-FA","File Analysis",{"name":56},{"id":70,"name":71,"tactic":72},"D3-FIM","File Integrity Monitoring",{"name":56},{"id":74,"name":75,"tactic":76},"D3-OPM","Operational Process Monitoring",{"name":56},{"id":78,"name":79,"tactic":80},"D3-DA","Dynamic Analysis",{"name":56},{"id":82,"name":83,"tactic":84},"D3-EFA","Emulated File Analysis",{"name":56},{"id":86,"name":87,"tactic":88},"D3-PSA","Process Spawn Analysis",{"name":56},{"id":90,"name":91,"tactic":92},"D3-FEV","File Eviction",{"name":93},"Evict",{"id":95,"name":96,"tactic":97},"D3-AL","Account Locking",{"name":93},{"id":99,"name":100,"tactic":101},"D3-DF","Decoy File",{"name":102},"Deceive",{"id":104,"name":105,"tactic":106},"D3-FE","File Encryption",{"name":107},"Harden",{"id":109,"name":110,"tactic":111},"D3-AA","Agent Authentication",{"name":107},{"id":113,"name":114,"tactic":115},"D3-CDP","Change Default Password",{"name":107},{"id":117,"name":118,"tactic":119},"D3-SCP","System Configuration Permissions",{"name":107},{"id":121,"name":122,"tactic":123},"D3-RC","Restore Configuration",{"name":124},"Restore",{"id":126,"name":127,"tactic":128},"D3-RF","Restore File",{"name":124},{"id":130,"name":131,"tactic":132},"D3-ULA","Unlock Account",{"name":124},{"id":134,"name":135,"tactic":136},"D3-RUAA","Restore User Account Access",{"name":124},{"id":138,"name":139,"tactic":140},"D3-RD","Restore Database",{"name":124},{"id":142,"name":143,"tactic":144},"D3-SCF","System Call Filtering",{"name":145},"Isolate",{"id":147,"name":148,"tactic":149},"D3-CF","Content Filtering",{"name":145},{"id":151,"name":152,"tactic":153},"D3-LFP","Local File Permissions",{"name":145},{"id":155,"name":156,"tactic":157},"D3-RFAM","Remote File Access Mediation",{"name":145},{"id":159,"name":160,"tactic":161},"D3-CQ","Content Quarantine",{"name":145},{"id":163,"name":164,"tactic":165},"D3-CM","Content Modification",{"name":145},{"id":167,"name":168,"tactic":169},"D3-UAP","User Account Permissions",{"name":145},{"id":171,"name":172,"tactic":173},"D3-EAL","Executable Allowlisting",{"name":145},{"id":175,"name":176,"tactic":177},"D3-EDL","Executable Denylisting",{"name":145},{"id":179,"name":180,"tactic":181},"D3-HBPI","Hardware-based Process Isolation",{"name":145},{"id":183,"name":184,"techniques":185},"CAPEC-115","Authentication Bypass",[186],{"id":25,"name":26,"tactics":187,"countermeasures":190},[188,189],{"id":29,"name":30},{"id":32,"name":33},[191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259],{"id":36,"name":37,"tactic":192},{"name":39},{"id":41,"name":42,"tactic":194},{"name":39},{"id":45,"name":46,"tactic":196},{"name":39},{"id":49,"name":50,"tactic":198},{"name":39},{"id":53,"name":54,"tactic":200},{"name":56},{"id":58,"name":59,"tactic":202},{"name":56},{"id":62,"name":63,"tactic":204},{"name":56},{"id":66,"name":67,"tactic":206},{"name":56},{"id":70,"name":71,"tactic":208},{"name":56},{"id":74,"name":75,"tactic":210},{"name":56},{"id":78,"name":79,"tactic":212},{"name":56},{"id":82,"name":83,"tactic":214},{"name":56},{"id":86,"name":87,"tactic":216},{"name":56},{"id":90,"name":91,"tactic":218},{"name":93},{"id":95,"name":96,"tactic":220},{"name":93},{"id":99,"name":100,"tactic":222},{"name":102},{"id":104,"name":105,"tactic":224},{"name":107},{"id":109,"name":110,"tactic":226},{"name":107},{"id":113,"name":114,"tactic":228},{"name":107},{"id":117,"name":118,"tactic":230},{"name":107},{"id":121,"name":122,"tactic":232},{"name":124},{"id":126,"name":127,"tactic":234},{"name":124},{"id":130,"name":131,"tactic":236},{"name":124},{"id":134,"name":135,"tactic":238},{"name":124},{"id":138,"name":139,"tactic":240},{"name":124},{"id":142,"name":143,"tactic":242},{"name":145},{"id":147,"name":148,"tactic":244},{"name":145},{"id":151,"name":152,"tactic":246},{"name":145},{"id":155,"name":156,"tactic":248},{"name":145},{"id":159,"name":160,"tactic":250},{"name":145},{"id":163,"name":164,"tactic":252},{"name":145},{"id":167,"name":168,"tactic":254},{"name":145},{"id":171,"name":172,"tactic":256},{"name":145},{"id":175,"name":176,"tactic":258},{"name":145},{"id":179,"name":180,"tactic":260},{"name":145},{"id":262,"name":263,"techniques":264},"CAPEC-151","Identity Spoofing",[],{"id":266,"name":267,"techniques":268},"CAPEC-194","Fake the Source of Data",[],{"id":270,"name":271,"techniques":272},"CAPEC-22","Exploiting Trust in Client",[],{"id":274,"name":275,"techniques":276},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[277],{"id":278,"name":279,"tactics":280,"countermeasures":287},"T1040","Network Sniffing",[281,284],{"id":282,"name":283},"TA0031","Credential Access",{"id":285,"name":286},"TA0102","Discovery",[288],{"id":289,"name":290,"tactic":291},"D3-DNSTA","DNS Traffic Analysis",{"name":56},{"id":293,"name":294,"techniques":295},"CAPEC-593","Session Hijacking",[296,340,453],{"id":297,"name":298,"tactics":299,"countermeasures":303},"T1185","Browser Session Hijacking",[300],{"id":301,"name":302},"TA0100","Collection",[304,308,312,316,320,324,328,332,336],{"id":305,"name":306,"tactic":307},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":56},{"id":309,"name":310,"tactic":311},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":56},{"id":313,"name":314,"tactic":315},"D3-CSPP","Client-server Payload Profiling",{"name":56},{"id":317,"name":318,"tactic":319},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":56},{"id":321,"name":322,"tactic":323},"D3-NTSA","Network Traffic Signature Analysis",{"name":56},{"id":325,"name":326,"tactic":327},"D3-APCA","Application Protocol Command Analysis",{"name":56},{"id":329,"name":330,"tactic":331},"D3-NTCD","Network Traffic Community Deviation",{"name":56},{"id":333,"name":334,"tactic":335},"D3-RTSD","Remote Terminal Session Detection",{"name":56},{"id":337,"name":338,"tactic":339},"D3-NTF","Network Traffic Filtering",{"name":145},{"id":341,"name":342,"tactics":343,"countermeasures":348},"T1550.001","Application Access Token",[344,345],{"id":29,"name":30},{"id":346,"name":347},"TA0109","Lateral Movement",[349,353,357,359,363,365,367,369,371,373,375,377,379,383,387,391,395,399,403,407,411,415,419,423,427,431,435,437,439,443,447,451],{"id":350,"name":351,"tactic":352},"D3-PLA","Process Lineage Analysis",{"name":56},{"id":354,"name":355,"tactic":356},"D3-PSMD","Process Self-Modification Detection",{"name":56},{"id":86,"name":87,"tactic":358},{"name":56},{"id":360,"name":361,"tactic":362},"D3-CCSA","Credential Compromise Scope Analysis",{"name":56},{"id":305,"name":306,"tactic":364},{"name":56},{"id":309,"name":310,"tactic":366},{"name":56},{"id":313,"name":314,"tactic":368},{"name":56},{"id":317,"name":318,"tactic":370},{"name":56},{"id":321,"name":322,"tactic":372},{"name":56},{"id":325,"name":326,"tactic":374},{"name":56},{"id":329,"name":330,"tactic":376},{"name":56},{"id":333,"name":334,"tactic":378},{"name":56},{"id":380,"name":381,"tactic":382},"D3-PT","Process Termination",{"name":93},{"id":384,"name":385,"tactic":386},"D3-PS","Process Suspension",{"name":93},{"id":388,"name":389,"tactic":390},"D3-HR","Host Reboot",{"name":93},{"id":392,"name":393,"tactic":394},"D3-HS","Host Shutdown",{"name":93},{"id":396,"name":397,"tactic":398},"D3-CR","Credential Revocation",{"name":93},{"id":400,"name":401,"tactic":402},"D3-ANCI","Authentication Cache Invalidation",{"name":93},{"id":404,"name":405,"tactic":406},"D3-DUC","Decoy User Credential",{"name":102},{"id":408,"name":409,"tactic":410},"D3-CH","Credential Hardening",{"name":107},{"id":412,"name":413,"tactic":414},"D3-MFA","Multi-factor Authentication",{"name":107},{"id":416,"name":417,"tactic":418},"D3-CRO","Credential Rotation",{"name":107},{"id":420,"name":421,"tactic":422},"D3-TB","Token Binding",{"name":107},{"id":424,"name":425,"tactic":426},"D3-TBA","Token-based Authentication",{"name":107},{"id":428,"name":429,"tactic":430},"D3-RIC","Reissue Credential",{"name":124},{"id":432,"name":433,"tactic":434},"D3-KBPI","Kernel-based Process Isolation",{"name":145},{"id":142,"name":143,"tactic":436},{"name":145},{"id":179,"name":180,"tactic":438},{"name":145},{"id":440,"name":441,"tactic":442},"D3-ABPI","Application-based Process Isolation",{"name":145},{"id":444,"name":445,"tactic":446},"D3-WSAM","Web Session Access Mediation",{"name":145},{"id":448,"name":449,"tactic":450},"D3-CTS","Credential Transmission Scoping",{"name":145},{"id":337,"name":338,"tactic":452},{"name":145},{"id":454,"name":455,"tactics":456,"countermeasures":458},"T1563","Remote Service Session Hijacking",[457],{"id":346,"name":347},[459,461,463,465,467,469,471,473,475,479],{"id":305,"name":306,"tactic":460},{"name":56},{"id":309,"name":310,"tactic":462},{"name":56},{"id":313,"name":314,"tactic":464},{"name":56},{"id":317,"name":318,"tactic":466},{"name":56},{"id":321,"name":322,"tactic":468},{"name":56},{"id":325,"name":326,"tactic":470},{"name":56},{"id":329,"name":330,"tactic":472},{"name":56},{"id":333,"name":334,"tactic":474},{"name":56},{"id":476,"name":477,"tactic":478},"D3-ST","Session Termination",{"name":93},{"id":337,"name":338,"tactic":480},{"name":145},{"id":482,"name":483,"techniques":484},"CAPEC-633","Token Impersonation",[485],{"id":486,"name":487,"tactics":488,"countermeasures":494},"T1134","Access Token Manipulation",[489,490,493],{"id":29,"name":30},{"id":491,"name":492},"TA0005","Stealth",{"id":32,"name":33},[495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541],{"id":36,"name":37,"tactic":496},{"name":39},{"id":49,"name":50,"tactic":498},{"name":39},{"id":41,"name":42,"tactic":500},{"name":39},{"id":53,"name":54,"tactic":502},{"name":56},{"id":58,"name":59,"tactic":504},{"name":56},{"id":360,"name":361,"tactic":506},{"name":56},{"id":74,"name":75,"tactic":508},{"name":56},{"id":86,"name":87,"tactic":510},{"name":56},{"id":476,"name":477,"tactic":512},{"name":93},{"id":396,"name":397,"tactic":514},{"name":93},{"id":400,"name":401,"tactic":516},{"name":93},{"id":404,"name":405,"tactic":518},{"name":102},{"id":408,"name":409,"tactic":520},{"name":107},{"id":412,"name":413,"tactic":522},{"name":107},{"id":416,"name":417,"tactic":524},{"name":107},{"id":420,"name":421,"tactic":526},{"name":107},{"id":424,"name":425,"tactic":528},{"name":107},{"id":121,"name":122,"tactic":530},{"name":124},{"id":428,"name":429,"tactic":532},{"name":124},{"id":142,"name":143,"tactic":534},{"name":145},{"id":448,"name":449,"tactic":536},{"name":145},{"id":171,"name":172,"tactic":538},{"name":145},{"id":175,"name":176,"tactic":540},{"name":145},{"id":179,"name":180,"tactic":542},{"name":145},{"id":544,"name":545,"techniques":546},"CAPEC-650","Upload a Web Shell to a Web Server",[547],{"id":548,"name":549,"tactics":550,"countermeasures":554},"T1505.003","Web Shell",[551],{"id":552,"name":553},"TA0110","Persistence",[555,559,563,567,571,573,575,577,579,581,583,585,587,589,591,593,595,597,599,603,605,607,609,611,613,615,617,619,621,623,625],{"id":556,"name":557,"tactic":558},"D3-NNI","Network Node Inventory",{"name":39},{"id":560,"name":561,"tactic":562},"D3-PLM","Physical Link Mapping",{"name":39},{"id":564,"name":565,"tactic":566},"D3-LLM","Logical Link Mapping",{"name":39},{"id":568,"name":569,"tactic":570},"D3-EHB","Endpoint Health Beacon",{"name":56},{"id":66,"name":67,"tactic":572},{"name":56},{"id":70,"name":71,"tactic":574},{"name":56},{"id":78,"name":79,"tactic":576},{"name":56},{"id":82,"name":83,"tactic":578},{"name":56},{"id":350,"name":351,"tactic":580},{"name":56},{"id":354,"name":355,"tactic":582},{"name":56},{"id":86,"name":87,"tactic":584},{"name":56},{"id":90,"name":91,"tactic":586},{"name":93},{"id":380,"name":381,"tactic":588},{"name":93},{"id":384,"name":385,"tactic":590},{"name":93},{"id":388,"name":389,"tactic":592},{"name":93},{"id":392,"name":393,"tactic":594},{"name":93},{"id":99,"name":100,"tactic":596},{"name":102},{"id":104,"name":105,"tactic":598},{"name":107},{"id":600,"name":601,"tactic":602},"D3-RNA","Restore Network Access",{"name":124},{"id":126,"name":127,"tactic":604},{"name":124},{"id":147,"name":148,"tactic":606},{"name":145},{"id":151,"name":152,"tactic":608},{"name":145},{"id":155,"name":156,"tactic":610},{"name":145},{"id":159,"name":160,"tactic":612},{"name":145},{"id":163,"name":164,"tactic":614},{"name":145},{"id":171,"name":172,"tactic":616},{"name":145},{"id":175,"name":176,"tactic":618},{"name":145},{"id":432,"name":433,"tactic":620},{"name":145},{"id":142,"name":143,"tactic":622},{"name":145},{"id":179,"name":180,"tactic":624},{"name":145},{"id":440,"name":441,"tactic":626},{"name":145},{"id":628,"name":629,"techniques":630},"CAPEC-94","Adversary in the Middle (AiTM)",[631],{"id":632,"name":633,"tactics":634,"countermeasures":637},"T1557","Adversary-in-the-Middle",[635,636],{"id":282,"name":283},{"id":301,"name":302},[638,640,642,644,646,648,650,652,654,658],{"id":305,"name":306,"tactic":639},{"name":56},{"id":309,"name":310,"tactic":641},{"name":56},{"id":313,"name":314,"tactic":643},{"name":56},{"id":317,"name":318,"tactic":645},{"name":56},{"id":321,"name":322,"tactic":647},{"name":56},{"id":325,"name":326,"tactic":649},{"name":56},{"id":329,"name":330,"tactic":651},{"name":56},{"id":333,"name":334,"tactic":653},{"name":56},{"id":655,"name":656,"tactic":657},"D3-CAA","Connection Attempt Analysis",{"name":56},{"id":337,"name":338,"tactic":659},{"name":145},[],[662,663],"GHSA-8vmr-h7h5-cqhg","GO-2025-3397",[],[666,668],{"_key":667},"SUSE-SU-2025:0297-1",{"_key":669},"OPENSUSE-SU-2025:14704-1",[],[672,673],{"_key":667},{"_key":669},"2025-01-16T19:19:19.373Z","2025-02-12T20:31:21.273Z","Analyzed",{"cisa_kev":678,"cisa_ransomware":678,"cisa_vendor":9,"epss_severity":679,"epss_score":680,"severity":681,"severity_score":682,"severity_version":683,"severity_source":684,"severity_vector":685,"severity_status":676},false,"low",0.00055,"medium",5.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",[687,697,703,707,712],{"url":688,"sources":689,"tags":692},"https://github.com/t2bot/matrix-media-repo/security/advisories/GHSA-8vmr-h7h5-cqhg",[684,690,691],"nvd","osv_go",[693,694,695,696],"X Refsource CONFIRM","Vendor Advisory","WEB","Advisory",{"url":698,"sources":699,"tags":700},"https://github.com/matrix-org/matrix-spec-proposals/pull/3916",[684,690,691],[701,702,695],"X Refsource MISC","Issue Tracking",{"url":704,"sources":705,"tags":706},"https://nvd.nist.gov/vuln/detail/CVE-2024-36402",[691],[696],{"url":708,"sources":709,"tags":710},"https://github.com/t2bot/matrix-media-repo",[691],[711],"PACKAGE",{"url":713,"sources":714,"tags":715},"https://pkg.go.dev/vuln/GO-2025-3397",[691],[695],[],{"date":718,"score":680,"percentile":719},"2026-06-04",0.17421,[721,725,728,731,734,737,740,743,746,750,753,756,759,762,765,769,771,774,777,780,783,786,789,792,795,798,801,804,807,810,813,816,819,821,824,827,830,833,836,839,842,845,848,850,853,856,859,862,865,867,870,873,876,879,882,885,888,891,894,897,900,903,906,909,912,914,917,919,921,923,926,929,932,934,936,938,941,944,947,950,953,956,959,962,965,968,971,974,977,980],{"date":722,"score":723,"percentile":724},"2025-11-04",0.00122,0.32071,{"date":726,"score":723,"percentile":727},"2025-11-05",0.32054,{"date":729,"score":723,"percentile":730},"2025-11-06",0.32059,{"date":732,"score":723,"percentile":733},"2025-11-07",0.32077,{"date":735,"score":723,"percentile":736},"2025-11-08",0.32078,{"date":738,"score":723,"percentile":739},"2025-11-09",0.32053,{"date":741,"score":723,"percentile":742},"2025-11-10",0.32004,{"date":744,"score":723,"percentile":745},"2025-11-11",0.32023,{"date":747,"score":748,"percentile":749},"2025-11-12",0.00136,0.34113,{"date":751,"score":748,"percentile":752},"2025-11-13",0.34129,{"date":754,"score":748,"percentile":755},"2025-11-14",0.34135,{"date":757,"score":748,"percentile":758},"2025-11-15",0.34134,{"date":760,"score":748,"percentile":761},"2025-11-16",0.34103,{"date":763,"score":748,"percentile":764},"2025-11-17",0.34079,{"date":766,"score":767,"percentile":768},"2025-11-18",0.00164,0.32056,{"date":770,"score":767,"percentile":724},"2025-11-19",{"date":772,"score":767,"percentile":773},"2025-11-20",0.32072,{"date":775,"score":748,"percentile":776},"2025-11-21",0.34115,{"date":778,"score":748,"percentile":779},"2025-11-22",0.34118,{"date":781,"score":748,"percentile":782},"2025-11-23",0.34084,{"date":784,"score":748,"percentile":785},"2025-11-24",0.3406,{"date":787,"score":748,"percentile":788},"2025-11-25",0.34053,{"date":790,"score":748,"percentile":791},"2025-11-26",0.34052,{"date":793,"score":748,"percentile":794},"2025-11-27",0.34061,{"date":796,"score":748,"percentile":797},"2025-11-28",0.34043,{"date":799,"score":748,"percentile":800},"2025-11-29",0.34026,{"date":802,"score":748,"percentile":803},"2025-11-30",0.34005,{"date":805,"score":748,"percentile":806},"2025-12-01",0.34107,{"date":808,"score":748,"percentile":809},"2025-12-02",0.34121,{"date":811,"score":748,"percentile":812},"2025-12-03",0.3412,{"date":814,"score":748,"percentile":815},"2025-12-04",0.34012,{"date":817,"score":748,"percentile":818},"2025-12-05",0.34045,{"date":820,"score":748,"percentile":818},"2025-12-06",{"date":822,"score":748,"percentile":823},"2025-12-07",0.34022,{"date":825,"score":748,"percentile":826},"2025-12-08",0.34035,{"date":828,"score":748,"percentile":829},"2025-12-09",0.34077,{"date":831,"score":748,"percentile":832},"2025-12-10",0.3413,{"date":834,"score":748,"percentile":835},"2025-12-11",0.34152,{"date":837,"score":748,"percentile":838},"2025-12-12",0.3418,{"date":840,"score":748,"percentile":841},"2025-12-13",0.3416,{"date":843,"score":748,"percentile":844},"2025-12-14",0.34132,{"date":846,"score":748,"percentile":847},"2025-12-15",0.34087,{"date":849,"score":748,"percentile":749},"2025-12-16",{"date":851,"score":748,"percentile":852},"2025-12-17",0.34165,{"date":854,"score":748,"percentile":855},"2025-12-18",0.34217,{"date":857,"score":748,"percentile":858},"2025-12-19",0.34239,{"date":860,"score":748,"percentile":861},"2025-12-20",0.34221,{"date":863,"score":748,"percentile":864},"2025-12-21",0.34163,{"date":866,"score":748,"percentile":758},"2025-12-22",{"date":868,"score":748,"percentile":869},"2025-12-23",0.34131,{"date":871,"score":748,"percentile":872},"2025-12-24",0.34127,{"date":874,"score":748,"percentile":875},"2025-12-25",0.34191,{"date":877,"score":748,"percentile":878},"2025-12-26",0.3417,{"date":880,"score":748,"percentile":881},"2025-12-27",0.34187,{"date":883,"score":748,"percentile":884},"2025-12-28",0.34082,{"date":886,"score":748,"percentile":887},"2025-12-29",0.34049,{"date":889,"score":748,"percentile":890},"2025-12-30",0.34039,{"date":892,"score":748,"percentile":893},"2025-12-31",0.34091,{"date":895,"score":748,"percentile":896},"2026-01-01",0.34246,{"date":898,"score":748,"percentile":899},"2026-01-02",0.34236,{"date":901,"score":748,"percentile":902},"2026-01-03",0.34223,{"date":904,"score":748,"percentile":905},"2026-01-04",0.34076,{"date":907,"score":748,"percentile":908},"2026-01-05",0.34057,{"date":910,"score":748,"percentile":911},"2026-01-06",0.34065,{"date":913,"score":748,"percentile":884},"2026-01-07",{"date":915,"score":748,"percentile":916},"2026-01-08",0.34109,{"date":918,"score":748,"percentile":806},"2026-01-09",{"date":920,"score":748,"percentile":916},"2026-01-10",{"date":922,"score":748,"percentile":847},"2026-01-11",{"date":924,"score":748,"percentile":925},"2026-01-12",0.34021,{"date":927,"score":748,"percentile":928},"2026-01-13",0.34008,{"date":930,"score":748,"percentile":931},"2026-01-14",0.34046,{"date":933,"score":748,"percentile":890},"2026-01-15",{"date":935,"score":748,"percentile":785},"2026-01-16",{"date":937,"score":748,"percentile":818},"2026-01-17",{"date":939,"score":748,"percentile":940},"2026-01-18",0.33986,{"date":942,"score":748,"percentile":943},"2026-01-19",0.3395,{"date":945,"score":748,"percentile":946},"2026-01-20",0.33931,{"date":948,"score":748,"percentile":949},"2026-01-21",0.33897,{"date":951,"score":748,"percentile":952},"2026-01-22",0.33873,{"date":954,"score":748,"percentile":955},"2026-01-23",0.33934,{"date":957,"score":748,"percentile":958},"2026-01-24",0.33944,{"date":960,"score":748,"percentile":961},"2026-01-25",0.33885,{"date":963,"score":748,"percentile":964},"2026-01-26",0.33799,{"date":966,"score":748,"percentile":967},"2026-01-27",0.33792,{"date":969,"score":748,"percentile":970},"2026-01-28",0.3377,{"date":972,"score":748,"percentile":973},"2026-01-29",0.33731,{"date":975,"score":748,"percentile":976},"2026-01-30",0.33718,{"date":978,"score":748,"percentile":979},"2026-01-31",0.33726,{"date":981,"score":748,"percentile":982},"2026-02-01",0.33825,[984,989,992],{"source":684,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":985,"cvss_v4_0":9},{"baseScore":682,"baseSeverity":986,"vectorString":685,"impactScore":987,"exploitabilityScore":988},"MEDIUM",2.3,10,{"source":690,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":990,"cvss_v4_0":9},{"baseScore":682,"baseSeverity":986,"vectorString":991,"impactScore":987,"exploitabilityScore":988},"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",{"source":691,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":993,"cvss_v4_0":9},{"baseScore":682,"baseSeverity":9,"vectorString":685,"impactScore":987,"exploitabilityScore":988},[995,1008],{"ecosystem":996,"name":997,"vendor":998,"product":999,"cpe_part":9,"purl_type":1000,"purl_namespace":998,"purl_name":999,"source":9,"versions":1001},"Go","github.com/t2bot/matrix-media-repo","github.com/t2bot","matrix-media-repo","golang",[1002],{"version":1003,"is_range":1004,"range_type":1005,"version_start":9,"version_start_type":9,"version_end":1006,"version_end_type":1007,"fixed_in":9},"lt1_3_5",true,"semver","1.3.5","excluding",{"ecosystem":9,"name":999,"vendor":1009,"product":999,"cpe_part":1010,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1011},"t2bot","a",[1012],{"version":1013,"is_range":1004,"range_type":1014,"version_start":9,"version_start_type":9,"version_end":1006,"version_end_type":1007,"fixed_in":9},"lt1.3.5","cpe"]