github.com/matrix-org/gomatrixserverlib

2 results · Feed

• Medium 4.3
  CVE-2024-52594

  Server-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlib

  Gomatrixserverlib is a Go library for matrix federation. Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. The commit `c4f1e01` fixes this issue. Users are advised t…

  matrix-org gomatrixserverlib github.com/matrix-org/gomatrixserverlib dendrite Alpine Go
  Jan 16, 2025
• Medium 5.0
  CVE-2022-36009

  Incorrect parsing of access level in gomatrixserverlib and dendrite

  gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the `"events_default"` key of the `m.room.power_l…

  matrix-org gomatrixserverlib github.com/matrix-org/gomatrixserverlib github.com/matrix-org/dendrite Go
  Aug 19, 2022