{"action":"Upgrade github.com/matrix-org/gomatrixserverlib to 0.0.0-20250116181547-c4f1e01eab0d or later.","affected":[{"introduced":"0"}],"component":"github.com/matrix-org/gomatrixserverlib","cve_ids":["CVE-2024-52594"],"ecosystem":"Go","epss":0.00354,"exploited":false,"fixed_versions":["0.0.0-20250116181547-c4f1e01eab0d"],"ghsa_id":"GHSA-4ff6-858j-r822","id":"tcs_01M5KEWF15CDH02WRZRWDWX9M2","modified_at":"2025-01-17T15:41:23Z","published_at":"2025-01-16T23:08:32Z","references":["https://osv.dev/vulnerability/GHSA-4ff6-858j-r822","https://github.com/matrix-org/gomatrixserverlib/security/advisories/GHSA-4ff6-858j-r822","https://nvd.nist.gov/vuln/detail/CVE-2024-52594","https://github.com/matrix-org/gomatrixserverlib/commit/c4f1e01eab0dd435709ad15463ed38a079ad6128","https://github.com/matrix-org/gomatrixserverlib","https://pkg.go.dev/vuln/GO-2025-3396"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-4ff6-858j-r822","url":"https://osv.dev/vulnerability/GHSA-4ff6-858j-r822"}],"summary":"Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation"}