Go/github.com/matrix-org/gomatrixserverlib CVE-2024-52594: medium 4.3, EPSS 0.35%

Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation

Action: Upgrade github.com/matrix-org/gomatrixserverlib to 0.0.0-20250116181547-c4f1e01eab0d or later.

go get github.com/matrix-org/gomatrixserverlib@v0.0.0-20250116181547-c4f1e01eab0d

Affected

Fixed versions

Sources

• osv: GHSA-4ff6-858j-r822
• https://github.com/matrix-org/gomatrixserverlib/security/advisories/GHSA-4ff6-858j-r822
• https://nvd.nist.gov/vuln/detail/CVE-2024-52594
• https://github.com/matrix-org/gomatrixserverlib/commit/c4f1e01eab0dd435709ad15463ed38a079ad6128
• https://github.com/matrix-org/gomatrixserverlib
• https://pkg.go.dev/vuln/GO-2025-3396

CVE-2024-52594 · published 2025-01-16T23:08:32Z · modified 2025-01-17T15:41:23Z · JSON