{"action":"Upgrade github.com/matrix-org/gomatrixserverlib to 0.0.0-20250116181547-c4f1e01eab0d or later.","affected":[{"introduced":"0"}],"component":"github.com/matrix-org/gomatrixserverlib","cve_ids":["CVE-2024-52594"],"ecosystem":"Go","epss":0.00354,"exploited":false,"fixed_versions":["0.0.0-20250116181547-c4f1e01eab0d"],"ghsa_id":"GHSA-4ff6-858j-r822","id":"tcs_01M5KG6RCGCBAFSBFZ2K1F7HTH","modified_at":"2025-01-16T23:27:18.600557Z","published_at":"2025-01-16T22:53:23Z","references":["https://osv.dev/vulnerability/GO-2025-3396","https://nvd.nist.gov/vuln/detail/CVE-2024-52594","https://github.com/matrix-org/gomatrixserverlib/commit/c4f1e01eab0dd435709ad15463ed38a079ad6128","https://github.com/matrix-org/gomatrixserverlib/security/advisories/GHSA-4ff6-858j-r822"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GO-2025-3396","url":"https://osv.dev/vulnerability/GO-2025-3396"},{"source":"nvd","source_id":"CVE-2024-52594","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52594"}],"summary":"Server-Side Request Forgery (SSRF) on redirects and federation in github.com/matrix-org/gomatrixserverlib"}