https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:00:34.340528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-215228 EUVD-2026-215228 2026-10-04T15:00:34.410219+00:00 EUVD-2026-215228 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52594 fkie_cve-2024-52594 2026-10-04T15:00:34.410258+00:00

Gomatrixserverlib is a Go library for matrix federation. Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. The commit `c4f1e01` fixes this issue. Users are advised to upgrade. Users unable to upgrade should use a local firewall to limit the network segments and hosts the service using gomatrixserverlib can access.

 https://cve.radiocsirt.org/vuln/ghsa-4ff6-858j-r822 GHSA-4ff6-858j-r822 — Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation 2026-10-04T15:00:34.410292+00:00

Affected: Go: github.com/matrix-org/gomatrixserverlib

### Impact Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions.

### Patches

c4f1e01eab0dd435709ad15463ed38a079ad6128 fixes this issue.

### Workarounds Use a local firewall to limit the network segments and hosts the service using gomatrixserverlib can access.

### References N/A

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14704-1 openSUSE-SU-2025:14704-1 — govulncheck-vulndb-0.0.20250117T214834-1.1 on GA media 2026-10-04T15:00:34.410322+00:00

govulncheck-vulndb-0.0.20250117T214834-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:0297-1 SUSE-SU-2025:0297-1 — Security update for govulncheck-vulndb 2026-10-04T15:00:34.410347+00:00

Security update for govulncheck-vulndb