GHSA-4ff6-858j-r822
GitHub Security Advisory
Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
### Impact
Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions.
### Patches
c4f1e01eab0dd435709ad15463ed38a079ad6128 fixes this issue.
### Workarounds
Use a local firewall to limit the network segments and hosts the service using gomatrixserverlib can access.
### References
N/A
Affected Packages
Go
github.com/matrix-org/gomatrixserverlib
Affected versions:
0
(fixed in 0.0.0-20250116181547-c4f1e01eab0d)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 12, 2025 6:34 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.