VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/matrix-org/gomatrixserverlib: vulnerability history, versions and safety

github.com/matrix-org/gomatrixserverlib is a package in the Go ecosystem. Vulert records 3 vulnerabilities for it across 120 releases, from Aug 2022 to Jan 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
3 vulnerabilities recorded M1 U2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/matrix-org/gomatrixserverlib vulnerabilities

Vulert verdict on github.com/matrix-org/gomatrixserverlib v0.0.0-20260716140101-4fe595dc7f58 i

Updated on 23 Oct 2026

Action needed: v0.0.0-20260716140101-4fe595dc7f58 has 3 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 75/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v0.0.0-20260716140101-4fe595dc7f58 — affected i
  • Vulnerabilities on record 3 over 2 years · 0 in the last year i
  • Latest disclosure 16 Jan 2025 i
  • Highest CVSS 4.3 i
  • With no published fix 0 i
  • Stars 67 i
  • OpenSSF scorecard 4/10 i
  • Last release 3 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/matrix-org/gomatrixserverlib, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20260716140101-4fe595dc7f58 16 Jul 2026 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20260506075950-c9c468727353 06 May 2026 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20260202113659-20c9de33969e 02 Feb 2026 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20260129115500-154e694329f8 29 Jan 2026 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20260128113001-cc9e8e26a847 28 Jan 2026 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20260128083855-a21aa71d670c 28 Jan 2026 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20251210211621-ffcbbd38fba6 10 Dec 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20251120023242-41deb2ee10c0 20 Nov 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20251103190139-eb14008fe6d1 03 Nov 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20251103185116-9bcabf10ad5e 03 Nov 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20251001235555-a57436b8e7d8 01 Oct 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20251001235420-daf5979782b7 01 Oct 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20251001235101-2ce03a86f286 01 Oct 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250815065806-6697d93cbcba 15 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250814102638-60b9d3e5b634 14 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250813150445-9f5070a65744 13 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250813145941-06887dd976e0 13 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250813144341-908a63a3eeea 13 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250813131115-3c641bb19714 13 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250813123338-6029db28e244 13 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250811195804-7a73c05d2a24 11 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250811193806-b7e0e0824751 11 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250811173135-d6bb4bdbc2ac 11 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250811171307-390dbaa8de98 11 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250811170942-d38d280a3c33 11 Aug 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250704071233-a234d6df21c7 04 Jul 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250704070928-8255061c1852 04 Jul 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250619052822-904c8f04597e 19 Jun 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250619052413-28a1845e0f4a 19 Jun 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250618200503-aef9aaef8f16 18 Jun 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250618185436-9bcd800ee250 18 Jun 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250612075633-38b41c32d656 12 Jun 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250606115648-b772e36e3579 06 Jun 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250606110406-84c2682fcfe3 06 Jun 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250520070507-c70b2132a00a 20 May 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250517183732-c3966ea89c2e 17 May 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250517183239-aed4d43dae65 17 May 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250416225858-458735c525ae 16 Apr 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250414190335-15ff695cb462 14 Apr 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250403161120-cac28f500a11 03 Apr 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250403153555-9742f20a9b13 03 Apr 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250403153350-522f69236ae6 03 Apr 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250324075430-479c9abf1ca5 24 Mar 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250313014629-9d0933727435 13 Mar 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250127190859-51ff16e35a61 27 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250127190748-9b4a950c38bc 27 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250119093603-cfce59386d6e 19 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250119093516-0a1b2bafb5cf 19 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250119092335-6f6e77fcf7e5 19 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250116181547-c4f1e01eab0d 16 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250106190126-bd689f983812 06 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250106190028-bf86bc98b879 06 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20250106155626-30cbdb4f140c 06 Jan 2025 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241221202124-7a74c731a3cf 21 Dec 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241221200131-feba51a28f64 21 Dec 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241215094829-e86ab16eabe8 15 Dec 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241106185410-dbd5f31fefc0 06 Nov 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241106182626-ecbe67fa5bf1 06 Nov 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241106182540-6c4c6f7d0d30 06 Nov 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241106144523-8a5752e37788 06 Nov 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241106144321-be8877e91426 06 Nov 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241105131735-c1e1dbe75c58 05 Nov 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241105122021-810787d983d7 05 Nov 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241029220330-85fed4050112 29 Oct 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241004181705-2d2a35a6ecbc 04 Oct 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241003201300-0b15794114ee 03 Oct 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20241003195813-c6e4bfe4416b 03 Oct 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240910190622-2c764912ce93 10 Sep 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240910190445-01f3d2ed9fda 10 Sep 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240910190401-f80a3be1daae 10 Sep 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240809075604-18167ce8c7c3 09 Aug 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240801173829-d531860ad2cb 01 Aug 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240731060850-3e94135dfe2a 31 Jul 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240726063041-49ce47bcaec4 26 Jul 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240708061058-23f2f5f12f5f 08 Jul 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240618131621-ba4c4992f66d 18 Jun 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240419122254-b83ee100f1e4 19 Apr 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240328203753-c2391f7113a5 28 Mar 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240326183347-e8077abf519a 26 Mar 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240116122202-14ee7615d604 16 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240116114211-fbff5862b3cf 16 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240116082903-14fa870fdbc5 16 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240115192137-19c0a71a9d84 15 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240115183009-281118d8c535 15 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240115091632-4e7fa3601832 15 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240115084322-2e1e54a1808b 15 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240109180417-3495e573f2b7 09 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240109174429-bfb7045d9c8a 09 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240109174027-b70847e8314b 09 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240109082518-140f4d2e6b23 09 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240109081601-8e7c6de57bc7 09 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20240104010700-2b336b33342c 04 Jan 2024 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231219232834-bbfb4a048862 19 Dec 2023 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231218234412-e1475e06d1e1 18 Dec 2023 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231214165234-85489e2db3f5 14 Dec 2023 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231214164601-72c39c89bb8d 14 Dec 2023 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231214163540-05f932148374 14 Dec 2023 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231214160530-436aee58734d 14 Dec 2023 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231212153624-e97395e5911c 12 Dec 2023 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231212115925-41497b7563eb 12 Dec 2023 M1 U2 Apache-2.0 Yes Details →
v0.0.0-20231212115306-d5e13a259faa 12 Dec 2023 M1 U2 — Yes Details →
v0.0.0-20231212115300-6a0f0bda48d6 12 Dec 2023 M1 U2 — Yes Details →
v0.0.0-20231212115215-2aa58908de15 12 Dec 2023 M1 U2 — Yes Details →
v0.0.0-20231212000720-5dd581bf6b8f 12 Dec 2023 M1 U2 — Yes Details →
v0.0.0-20231208213015-8ce8d03b556e 08 Dec 2023 M1 U2 — Yes Details →
v0.0.0-20231208203150-a907b4fce637 08 Dec 2023 M1 U2 — Yes Details →
v0.0.0-20231123125815-185a49a8c72d 23 Nov 2023 M1 U2 — Yes Details →
v0.0.0-20231123113708-498c48650dc9 23 Nov 2023 M1 U2 — Yes Details →
v0.0.0-20231123112137-2369defc080e 23 Nov 2023 M1 U2 — Yes Details →
v0.0.0-20231122151721-e3b02c98f7eb 22 Nov 2023 M1 U2 — Yes Details →
v0.0.0-20231122130434-2beadf141c98 22 Nov 2023 M1 U2 — Yes Details →
v0.0.0-20231119143633-ed4e8a8cd18a 19 Nov 2023 M1 U2 — Yes Details →
v0.0.0-20231119143308-e0d67ae970ed 19 Nov 2023 M1 U2 — Yes Details →
v0.0.0-20231110155913-c8f73732b8f2 10 Nov 2023 M1 U2 — Yes Details →
v0.0.0-20231024124730-58af9a2712ca 24 Oct 2023 M1 U2 — Yes Details →
v0.0.0-20231024100158-213d8d9bf343 24 Oct 2023 M1 U2 — Yes Details →
v0.0.0-20231024070051-a4ebb3100650 24 Oct 2023 M1 U2 — Yes Details →
v0.0.0-20231023121512-16e7431168be 23 Oct 2023 M1 U2 — Yes Details →
v0.0.0-20231023121257-d1168e2c62d4 23 Oct 2023 M1 U2 — Yes Details →
v0.0.0-20231023114733-2c8d23d58766 23 Oct 2023 M1 U2 — Yes Details →

The newest 120 of 1,312 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1
  • 2025 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 3 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/matrix-org/gomatrixserverlib

The 3 most severe of 3 vulnerabilities recorded for this package

Search all 3 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2024-52594: Gomatrixserverlib Server-Side Request Forgery Vulnerability 4.3 medium 0.0.0-20250116181547-c4f1e01eab0d 16 Jan 2025
CVE-2022-36009: Incorrect event parsing in github.com/matrix-org/gomatrixserverlib N/A unrated 0.0.0-20220815091947-723fd495dde8 22 Aug 2022
CVE-2024-52594: SSRF Vulnerability in github.com/matrix-org/gomatrixserverlib N/A unrated 0.0.0-20250116181547-c4f1e01eab0d 16 Jan 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/matrix-org/gomatrixserverlib

Is github.com/matrix-org/gomatrixserverlib safe to use?

Vulert records 3 vulnerabilities for github.com/matrix-org/gomatrixserverlib in Go: 0 critical, 0 high, 1 medium and 0 low, plus 2 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/matrix-org/gomatrixserverlib's Vulert package health score?

Vulert scores github.com/matrix-org/gomatrixserverlib 75/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/matrix-org/gomatrixserverlib affected?

Yes. v0.0.0-20260716140101-4fe595dc7f58, the version you would install today, has 3 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/matrix-org/gomatrixserverlib should I use?

v0.0.0-20260716140101-4fe595dc7f58 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/matrix-org/gomatrixserverlib have?

3 vulnerabilities are recorded for github.com/matrix-org/gomatrixserverlib in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/matrix-org/gomatrixserverlib vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/matrix-org/gomatrixserverlib in the last 12 months, and the oldest entry in this database dates to 22 Aug 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/matrix-org/gomatrixserverlib are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/matrix-org/gomatrixserverlib for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/matrix-org/gomatrixserverlib version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.