Security
فارسی
All products

github.com/mattermost/mattermost-plugin-playbooks

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post typeCVE-2025-41395 · GHSA-3G36-GF7C-75QWVersion ranges need review. github.com/mattermost/mattermost-plugin-playbooksgithub.com/mattermost/mattermost-server/v5 Go Medium Fix reported
Mattermost Playbooks fails to properly validate permissionsCVE-2025-41423 · GHSA-FR22-5377-F3P7Version ranges need review. github.com/mattermost/mattermost-plugin-playbooksgithub.com/mattermost/mattermost-server/v5 Go Low Fix reported
Mattermost Playbooks fails to validate the uniqueness and quantity of task actionsCVE-2025-35965 · GHSA-689C-XQ7X-XJWFVersion ranges need review. github.com/mattermost/mattermost-plugin-playbooksgithub.com/mattermost/mattermost-server/v5 Go Medium Fix reported
Mattermost doesn't check public/private permissionsCVE-2026-6343 · GHSA-M79Q-8QF5-V622Version ranges need review. github.com/mattermost/mattermost-plugin-playbooksgithub.com/mattermost/mattermost-server/v5 Go Medium Fix reported
Mattermost doesn't check if {{team_id}} was being changed when updating playbooksCVE-2026-4286 · GHSA-GVG4-JHMR-6J23Version ranges need review. github.com/mattermost/mattermost-plugin-playbooksgithub.com/mattermost/mattermost-server/v5 Go Low Fix reported
Mattermost fails to verify run_create permission for empty playbookIdCVE-2026-26304 · GHSA-4PMX-622H-X359Version ranges need review. github.com/mattermost/mattermost-plugin-playbooks Go Medium Fix reported