| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/matrix-org/gomatrixserverlib | < 0.0.0-20250116181547-c4f1e01eab0d | 0.0.0-20250116181547-c4f1e01eab0d |
Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions.
c4f1e01eab0dd435709ad15463ed38a079ad6128 fixes this issue.
Use a local firewall to limit the network segments and hosts the service using gomatrixserverlib can access.
N/A
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free