Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/mattermost/mattermost-plugin-github
Go
· Package
4 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Mattermost doesn't enforce request body size limits on plugin HTTP endpoints
CVE-2026-5308 · GHSA-JMVR-R5HM-FXFR
Version ranges need review.
github.com/mattermost/mattermost-plugin-github
github.com/mattermost/mattermost-server
Go
High
Fix reported
2026-07-07
Mattermost doesn't validate user-supplied input in API request handlers
CVE-2026-4646 · GHSA-RMVV-8V8W-RF7X
Version ranges need review.
github.com/mattermost/mattermost-plugin-github
github.com/mattermost/mattermost-server
Go
Medium
Fix reported
2026-07-07
Mattermost allows authenticated users to gain access to private repositories
CVE-2026-28735 · GHSA-R5VF-GRCX-5VQP
Version ranges need review.
github.com/mattermost/mattermost-plugin-github
github.com/mattermost/mattermost-server
Go
Medium
Fix reported
2026-07-07
Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection
CVE-2025-13352 · GHSA-JF5H-XFW4-P8GP
Version ranges need review.
github.com/mattermost/mattermost-plugin-github
github.com/mattermost/mattermost-server/v5
Go
Low
Fix reported
2026-03-03
