CVE-2024-52594

Medium

Advisory

Published 16 Jan 2025In the index since 8 Sept 2026

Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
github.com/matrix-org/gomatrixserverlibgolang	v0.0.0-20220815094957-74b7ff4ae09c, v0.0.0-20230921171121-0466775328c7	0.0.0-20250116181547-c4f1e01eab0d	2

3 by stars

Chart

Latest

Affected images

Radar Score

1 of the 2 container images this version deploys carry CVE-2024-52594.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	github.com/matrix-org/gomatrixserverlib@v0.0.0-20230921171121-0466775328c7	0.0.0-20250116181547-c4f1e01eab0d

1,592

dendritegeek-cookbook

1 of the 1 container images this version deploys carry CVE-2024-52594.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	github.com/matrix-org/gomatrixserverlib@v0.0.0-20220815094957-74b7ff4ae09c	0.0.0-20250116181547-c4f1e01eab0d

2,143

1 of the 1 container images this version deploys carry CVE-2024-52594.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	github.com/matrix-org/gomatrixserverlib@v0.0.0-20230921171121-0466775328c7	0.0.0-20250116181547-c4f1e01eab0d

1,592

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	github.com/matrix-org/gomatrixserverlib@v0.0.0-20230921171121-0466775328c7	0.0.0-20250116181547-c4f1e01eab0d	2
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	github.com/matrix-org/gomatrixserverlib@v0.0.0-20220815094957-74b7ff4ae09c	0.0.0-20250116181547-c4f1e01eab0d	1