Vulnerability Report: GO-2025-3396

Affected Packages

• Path
  Go Versions
  Symbols
• github.com/matrix-org/gomatrixserverlib/fclient
  before v0.0.0-20250116181547-c4f1e01eab0d
  13 affected symbols

  • Client.CreateMediaDownloadRequest
  • Client.DoHTTPRequest
  • Client.DoRequestAndParseResponse
  • Client.GetServerKeys
  • Client.GetVersion
  • Client.LookupServerKeys
  • Client.LookupUserInfo
  • DNSCache.DialContext
  • LookupWellKnown
  • NewClient
  • NewDNSCache
  • NewFederationClient
  • ResolveServer

Aliases

• CVE-2024-52594

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-52594
• https://github.com/matrix-org/gomatrixserverlib/commit/c4f1e01eab0dd435709ad15463ed38a079ad6128
• https://github.com/matrix-org/gomatrixserverlib/security/advisories/GHSA-4ff6-858j-r822
• https://vuln.go.dev/ID/GO-2025-3396.json

Feedback