GHSA-4FF6-858J-R822 Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation

Impact Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. Patches c4f1e01eab0dd435709ad15463ed38a079ad6128 fixes this issue. Workarounds Use a local firewall to limit the network segments and hosts the...