github.com/mattermost/mattermost/server/v8 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2025-27933Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost allows members with permission to convert public channels to private and convert private to publicCVE-2025-27715Lowgithub.com/mattermost/mattermost/server/v8: Mattermost fail to prompt for explicit approval before adding a team admin to a private channelCVE-2025-24920Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Fails to Restrict Bookmark Creation and Updates in Archived ChannelsCVE-2025-25068Highgithub.com/mattermost/mattermost/server/v8: Mattermost Fails to Enforce MFA on Plugin EndpointsCVE-2025-25274Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Fails to Restrict Command Execution in Archived ChannelsCVE-2025-1472Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Fails to Properly Perform Viewer Role AuthorizationCVE-2025-24526Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost fails to restrict channel export of archived channelsCVE-2025-25279Criticalgithub.com/mattermost/mattermost/server/v8: Mattermost allows reading arbitrary files related to importing boardsCVE-2025-1412Lowgithub.com/mattermost/mattermost/server/v8: Mattermost fails to invalidate all active sessions when converting a user to a botCVE-2025-20051Criticalgithub.com/mattermost/mattermost/server/v8: Mattermost allows reading arbitrary filesCVE-2025-20621Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost webapp crash via a crafted postCVE-2025-20088Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost fails to properly validate post propsCVE-2025-20086Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost fails to properly validate post propsCVE-2025-21088Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Incorrect Type Conversion or CastCVE-2025-22449Lowgithub.com/mattermost/mattermost/server/v8: Mattermost Incorrect Authorization vulnerabilityCVE-2025-20033Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Improper Validation of Specified Type of Input vulnerabilityCVE-2025-22445Lowgithub.com/mattermost/mattermost/server/v8: Mattermost has Improper Check for Unusual or Exceptional ConditionsCVE-2024-54682Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Data Amplification vulnerabilityCVE-2024-54083Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Improper Validation of Specified Type of Input vulnerabilityCVE-2024-48872Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Race Condition vulnerabilityCVE-2024-47401Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Server vulnerable to application crash from attacker-generated large responseCVE-2024-50052Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost server allows authenticated user to delete arbitrary postCVE-2024-46872Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Server Path Traversal vulnerability that leads to Cross-Site Request ForgeryCVE-2024-10241Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost Server allows user to get private channel namesCVE-2024-10214Lowgithub.com/mattermost/mattermost/server/v8: Mattermost incorrectly issues two sessions when using desktop SSO

Stop the waste.
Protect your environment with Kodem.