github.com/mattermost/mattermost-plugin-calls
View on Github
Activity
- Latest release
- 13h ago
- Total releases
- 62
- Cadence
- ~20 days
- Last 12 months
- 22
Reach
- Stars
- 150
Details
- First release
- Dec 09, 2021
| Version | Released | |
|---|---|---|
v1.12.5
patch
|
v1.12.5
patch
Dependencies (21)
+ 13 more |
|
v1.12.4-rc1
pre
|
v1.12.4-rc1
pre
Dependencies (21)
+ 13 more |
|
v1.12.3
patch
|
v1.12.3
patch
Dependencies (21)
+ 13 more |
|
v1.11.6
patch
1 CVE
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.11.6
patch
Dependencies (23)
+ 15 more |
|
v1.12.2
minor
|
v1.12.2
minor
Dependencies (21)
+ 13 more |
|
v1.12.1
patch
|
v1.12.1
patch
Dependencies (21)
+ 13 more |
|
v1.12.0
minor
|
v1.12.0
minor
Dependencies (21)
+ 13 more |
|
v1.12.0-rc9
pre
|
v1.12.0-rc9
pre
Dependencies (21)
+ 13 more |
|
v1.12.0-rc8
pre
|
v1.12.0-rc8
pre
Dependencies (21)
+ 13 more |
|
v1.12.0-rc7
pre
|
v1.12.0-rc7
pre
Dependencies (21)
+ 13 more |
|
v1.12.0-rc6
pre
|
v1.12.0-rc6
pre
Dependencies (23)
+ 15 more |
|
v1.12.0-rc5
pre
|
v1.12.0-rc5
pre
Dependencies (23)
+ 15 more |
|
v1.11.5
patch
1 CVE
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.11.5
patch
Dependencies (23)
+ 15 more |
|
v1.12.0-rc4
pre
|
v1.12.0-rc4
pre
Dependencies (23)
+ 15 more |
|
v1.11.4
patch
1 CVE
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.11.4
patch
Dependencies (23)
+ 15 more |
|
v1.11.2
patch
1 CVE
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.11.2
patch
Dependencies (23)
+ 15 more |
|
v1.11.3
patch
1 CVE
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.11.3
patch
Dependencies (23)
+ 15 more |
|
v1.12.0-rc3
pre
|
v1.12.0-rc3
pre
Dependencies (23)
+ 15 more |
|
v1.11.1
patch
1 CVE
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.11.1
patch
Dependencies (23)
+ 15 more |
|
v1.12.0-rc2
pre
|
v1.12.0-rc2
pre
Dependencies (23)
+ 15 more |
|
v1.12.0-rc1
pre
1 CVE
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.12.0-rc1
pre
Dependencies (23)
+ 15 more |
|
v1.11.0
minor
1 CVE
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev |
v1.11.0
minor
Dependencies (23)
+ 15 more |
|
v1.9.2
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.9.2
minor
Dependencies (24)
+ 16 more |
|
v1.5.2
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.5.2
minor
Dependencies (24)
+ 16 more |
|
v1.4.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (24)
+ 16 more |
|
v1.3.2
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.3.2
minor
Dependencies (23)
+ 15 more |
|
v0.29.6
patch
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.29.6
patch
Dependencies (23)
+ 15 more |
|
v0.29.5
patch
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.29.5
patch
Dependencies (23)
+ 15 more |
|
v1.2.1
patch
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.2.1
patch
Dependencies (23)
+ 15 more |
|
v1.2.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.2.0
minor
Dependencies (23)
+ 15 more |
|
v1.1.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (23)
+ 15 more |
|
v1.0.1
major
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.1
major
Dependencies (23)
+ 15 more |
|
v0.29.1
patch
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.29.1
patch
Dependencies (23)
+ 15 more |
|
v0.29.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.29.0
minor
Dependencies (23)
+ 15 more |
|
v0.28.2
patch
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.28.2
patch
Dependencies (23)
+ 15 more |
|
v0.28.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.28.0
minor
Dependencies (23)
+ 15 more |
|
v0.27.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.27.0
minor
Dependencies (22)
+ 14 more |
|
v0.26.2
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.26.2
minor
Dependencies (15)
+ 7 more |
|
v0.25.1
patch
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.25.1
patch
Dependencies (21)
+ 13 more |
|
v0.25.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.25.0
minor
Dependencies (21)
+ 13 more |
|
v0.23.1
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.23.1
minor
Dependencies (21)
+ 13 more |
|
v0.22.2
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.22.2
minor
Dependencies (21)
+ 13 more |
|
v0.19.2
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.19.2
minor
Dependencies (18)
+ 10 more |
|
v0.17.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.17.0
minor
Dependencies (17)
+ 9 more |
|
v0.16.1
patch
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.16.1
patch
Dependencies (18)
+ 10 more |
|
v0.16.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.16.0
minor
Dependencies (18)
+ 10 more |
|
v0.15.3
patch
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.3
patch
Dependencies (16)
+ 8 more |
|
v0.15.1
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.1
minor
Dependencies (16)
+ 8 more |
|
v0.14.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.14.0
minor
Dependencies (15)
+ 7 more |
|
v0.13.0
minor
3 CVEs
CVE-2026-6347
GO-2026-5238
GHSA-82j6-4fq7-fx62
Jun 25, 2026
Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls Fixed in
1.12.0-rc2
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2025-62190
GO-2025-4254
GHSA-gmx5-frv9-9m9f
Dec 30, 2025
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls Fixed in
1.10.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-12689
GO-2025-4255
GHSA-j5vq-62gr-8v3r
Dec 30, 2025
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls Fixed in
1.11.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.13.0
minor
Dependencies (15)
+ 7 more |