github.com/mattermost/mattermost-plugin-playbooks
View on Github
Activity
- Latest release
- 1y ago
- Total releases
- 66
- Cadence
- ~15 days
- Last 12 months
- 0
Reach
- Stars
- —
Details
- First release
- Apr 03, 2020
| Version | Released | |
|---|---|---|
v1.41.1
patch
3 CVEs
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.41.1
patch
Dependencies (21)
+ 13 more |
|
v1.41.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.41.0
minor
Dependencies (27)
+ 19 more |
|
v1.40.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.40.0
minor
Dependencies (21)
+ 13 more |
|
v1.39.4
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.39.4
patch
Dependencies (21)
+ 13 more |
|
v1.39.3
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.39.3
patch
Dependencies (21)
+ 13 more |
|
v1.39.2
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.39.2
patch
Dependencies (21)
+ 13 more |
|
v1.36.1--pre-release
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.36.1--pre-release
pre
Dependencies (21)
+ 13 more |
|
v1.36.3
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.36.3
minor
Dependencies (20)
+ 12 more |
|
v1.39.1
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.39.1
patch
Dependencies (21)
+ 13 more |
|
v1.39.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.39.0
minor
Dependencies (21)
+ 13 more |
|
v1.38.1
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.38.1
patch
Dependencies (21)
+ 13 more |
|
v1.38.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.38.0
minor
Dependencies (21)
+ 13 more |
|
v1.37.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.37.0
minor
Dependencies (21)
+ 13 more |
|
v1.36.2
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.36.2
patch
Dependencies (20)
+ 12 more |
|
v1.35.2
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.35.2
patch
Dependencies (20)
+ 12 more |
|
v1.36.1
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.36.1
patch
Dependencies (20)
+ 12 more |
|
v1.35.1
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.35.1
patch
Dependencies (20)
+ 12 more |
|
v1.36.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.36.0
minor
Dependencies (20)
+ 12 more |
|
v1.35.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.35.0
minor
Dependencies (20)
+ 12 more |
|
v1.34.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.34.0
minor
Dependencies (20)
+ 12 more |
|
v1.34.0-alpha.2
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.34.0-alpha.2
pre
Dependencies (20)
+ 12 more |
|
v1.34.0-alpha.1
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.34.0-alpha.1
pre
Dependencies (20)
+ 12 more |
|
v1.32.6
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.32.6
patch
Dependencies (20)
+ 12 more |
|
v1.32.5
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.32.5
patch
Dependencies (20)
+ 12 more |
|
v1.32.3
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.32.3
patch
Dependencies (20)
+ 12 more |
|
v1.23.3
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.23.3
patch
Dependencies (15)
+ 7 more |
|
v1.32.1
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.32.1
minor
Dependencies (20)
+ 12 more |
|
v1.29.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.29.0
minor
Dependencies (20)
+ 12 more |
|
v1.27.0-rc2
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.27.0-rc2
pre
Dependencies (18)
+ 10 more |
|
v1.26.2
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.26.2
patch
Dependencies (18)
+ 10 more |
|
v1.27.0-alpha.1
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.27.0-alpha.1
pre
Dependencies (18)
+ 10 more |
|
v1.26.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.26.0
minor
Dependencies (18)
+ 10 more |
|
v1.25.0-rc3
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.25.0-rc3
pre
Dependencies (16)
+ 8 more |
|
v1.25.0-rc1
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.25.0-rc1
pre
Dependencies (16)
+ 8 more |
|
v1.23.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.23.0
minor
Dependencies (15)
+ 7 more |
|
v1.23.0-alpha.1
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.23.0-alpha.1
pre
Dependencies (15)
+ 7 more |
|
v1.21.0-alpha.2
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.0-alpha.2
pre
Dependencies (15)
+ 7 more |
|
v1.21.0-alpha.1
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.21.0-alpha.1
pre
Dependencies (15)
+ 7 more |
|
v1.18.0-rc1
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.18.0-rc1
pre
Dependencies (15)
+ 7 more |
|
v1.16.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.16.0
minor
Dependencies (15)
+ 7 more |
|
v1.16.0-rc2
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.16.0-rc2
pre
Dependencies (15)
+ 7 more |
|
v1.15.1-alpha.3
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.15.1-alpha.3
pre
Dependencies (15)
+ 7 more |
|
v1.15.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.15.0
minor
Dependencies (15)
+ 7 more |
|
v1.14.2
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.14.2
minor
Dependencies (15)
+ 7 more |
|
v1.13.0
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.0
minor
Dependencies (15)
+ 7 more |
|
v1.13.0-alpha.3
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.0-alpha.3
pre
Dependencies (15)
+ 7 more |
|
v1.13.0-alpha.2
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.0-alpha.2
pre
Dependencies (15)
+ 7 more |
|
v1.13.0-alpha.1
pre
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.0-alpha.1
pre
Dependencies (15)
+ 7 more |
|
v1.9.3
patch
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.9.3
patch
Dependencies (13)
+ 5 more |
|
v1.9.2
minor
6 CVEs
CVE-2026-4286
GO-2026-5404
GHSA-gvg4-jhmr-6j23
Jun 25, 2026
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check if {{team_id}} was being changed when updating playbooks in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260213020129-e1d6ec2c94e6
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-6343
GO-2026-5494
GHSA-m79q-8qf5-v622
Jun 25, 2026
Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost doesn't check public/private permissions in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260309184833-887d9cacb616
References Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-26304
GO-2026-4812
GHSA-4pmx-622h-x359
Mar 23, 2026
Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks Fixed in
1.41.1-0.20260316224925-705f54a81841
References Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-35965
GO-2025-3643
GHSA-689c-xq7x-xjwf
Apr 24, 2025
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41423
GO-2025-3644
GHSA-fr22-5377-f3p7
Apr 24, 2025
Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-41395
GO-2025-3642
GHSA-3g36-gf7c-75qw
Apr 24, 2025
Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: . Fixed in
1.41.0
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.9.2
minor
Dependencies (13)
+ 5 more |