Go/github.com/matrix-org/gomatrixserverlib CVE-2024-52594: medium 4.3, EPSS 0.35%

Server-Side Request Forgery (SSRF) on redirects and federation in github.com/matrix-org/gomatrixserverlib

Action: Upgrade github.com/matrix-org/gomatrixserverlib to 0.0.0-20250116181547-c4f1e01eab0d or later.

go get github.com/matrix-org/gomatrixserverlib@v0.0.0-20250116181547-c4f1e01eab0d

Affected

Fixed versions

Sources

• osv: GO-2025-3396
• nvd: CVE-2024-52594
• https://github.com/matrix-org/gomatrixserverlib/commit/c4f1e01eab0dd435709ad15463ed38a079ad6128
• https://github.com/matrix-org/gomatrixserverlib/security/advisories/GHSA-4ff6-858j-r822

CVE-2024-52594 · published 2025-01-16T22:53:23Z · modified 2025-01-16T23:27:18.600557Z · JSON