matrix-org github.com/matrix-org/gomatrixserverlib vulnerabilities

Latest matrix-org github.com/matrix-org/gomatrixserverlib CVEs

Newest publication first

1. CVE-2024-52594 Server-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlib

   Published 2025-01-16

   Medium·CVSS 4.3 EPSS 0.35%

   Gomatrixserverlib is a Go library for matrix federation. Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. The commit c4f1e01 fixes this issue. Users are advised to upgrade. Users unable...

2. CVE-2022-36009 Incorrect parsing of access level in gomatrixserverlib and dendrite

   Published 2022-08-19

   High·CVSS 8.8 EPSS 0.86%

   gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the "events_default" key of the m.room.power_levels event, defaulting...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.