Browse Security Advisories
Moderate Security Advisories for https://github.com/mattermost/mattermost from github Clear Filters
Moderate
10 months ago
Mattermost has a Missing Authorization vulnerability
go
github.com/mattermost/mattermost-server, github.com/mattermost/mattermost/server/v8
Moderate
10 months ago
Mattermost has a Missing Authorization vulnerability
go
github.com/mattermost/mattermost-server, github.com/mattermost/mattermost/server/v8
Moderate
11 months ago
Mattermost makes Use of Weak Hash
go
github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server
Moderate
about 1 year ago
Mattermost Path Traversal vulnerability
go
github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server
Moderate
about 1 year ago
Mattermost Missing Authentication for Critical Function
go
github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server
Moderate
about 1 year ago
Mattermost Incorrect Authorization vulnerability
go
github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server
Moderate
about 1 year ago
Mattermost allows authenticated administrator to execute LDAP search filter injection
go
github.com/mattermost/mattermost-server, github.com/mattermost/mattermost/server/v8
Moderate
about 1 year ago
Mattermost fails to properly invalidate personal access tokens upon user deactivation
go
github.com/mattermost/mattermost/server/v8
Moderate
about 1 year ago
Mattermost fails to clear Google OAuth credentials
go
github.com/mattermost/mattermost/server/v8
Moderate
about 1 year ago
Mattermost improperly allows team administrators to modify team invites
go
github.com/mattermost/mattermost/server/v8
Moderate
over 1 year ago
Mattermost Fails to Lockout LDAP Users After Repeated Login Failures
go
github.com/mattermost/mattermost/server/v8
Moderate
over 1 year ago
Mattermost Incorrect Authorization vulnerability
go
github.com/mattermost/mattermost/server/v8
Moderate
over 1 year ago
Mattermost vulnerable to Incorrect Implementation of Authentication Algorithm
go
github.com/mattermost/mattermost/server/v8
Moderate
over 1 year ago
Mattermost Fails to Restrict Certain Operations on System Admins
go
github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server
Moderate
almost 2 years ago
Mattermost fails to strip `embeds` from `metadata` when broadcasting `posted` events
go
github.com/mattermost/mattermost/server/v8
Moderate
about 2 years ago
Mattermost allows remote actor to set arbitrary RemoteId values for synced users
go
github.com/mattermost/mattermost/server/v8
Moderate
over 2 years ago
Mattermost fails to limit the number of active sessions
go
github.com/mattermost/mattermost-server
Moderate
over 2 years ago
Mattermost's detailed error messages reveal the full file path
go
github.com/mattermost/mattermost-server
Moderate
over 2 years ago
Mattermost crashes web clients via a malformed custom status
go
github.com/mattermost/mattermost-server
Moderate
over 2 years ago
Mattermost Server Improper Access Control
go
github.com/mattermost/mattermost/server/v8
Moderate
over 2 years ago
Mattermost Server doesn't limit the number of user preferences
go
github.com/mattermost/mattermost/server/v8
Moderate
over 2 years ago
Mattermost vulnerable to denial of service via large number of emoji reactions
go
github.com/mattermost/mattermost/server/v8
Moderate
over 2 years ago
Mattermost notified all users in the channel when using WebSockets to respond individually
go
github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost/server/v8
Moderate
almost 3 years ago
Mattermost password hash disclosure vulnerability
go
github.com/mattermost/mattermost-server, github.com/mattermost/mattermost-server/v5, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost/server/v8
Moderate
almost 3 years ago
Mattermost vulnerable to excessive memory consumption
go
github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6
Moderate
about 4 years ago
Mattermost Server Sensitive Data Exposure
go
github.com/mattermost/mattermost-server/v5
Moderate
about 4 years ago
Mattermost Server is vulnerable to XSS through crafted links
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server exposes information stored by a web browser
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server: Files may be rendered inline instead of downloaded, allowing script execution
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server exposes account details to any Team Administrator
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server is vulnerable to Code Injection through its LDAP fields
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server is vulnerable to XSS via a Legal or Support setting
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server's Session ID and Session Token are potentially compromised
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server is vulnerable to XSS through customizable theme color-code values
go
github.com/mattermost/mattermost-server
Moderate
about 4 years ago
Mattermost Server vulnerable to Cross-site Scripting through file preview feature
go
github.com/mattermost/mattermost-server
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,054
Erlang Ecosystem Foundation
171
GitHub Advisory Database
34,444
Filter by Ecosystem
maven
3,726
packagist
3,701
pypi
2,753
npm
2,572
go
2,273
nuget
2,181
cargo
605
rubygems
495
hex
38
swift
22
actions
16
pub
3
Filter by Package
moodle/moodle
318
openclaw
300
tensorflow
200
magento/community-edition
193
tensorflow-cpu
192
tensorflow-gpu
187
org.jenkins-ci.main:jenkins-core
158
github.com/mattermost/mattermost/server/v8
129
typo3/cms
116
github.com/mattermost/mattermost-server
115
com.liferay.portal:release.portal.bom
113
org.apache.tomcat:tomcat
100
Magick.NET-Q16-AnyCPU
97
Magick.NET-Q16-HDRI-AnyCPU
96
Magick.NET-Q16-HDRI-x86
94
Magick.NET-Q16-HDRI-OpenMP-arm64
93
pimcore/pimcore
91
Magick.NET-Q16-HDRI-x64
91
Magick.NET-Q16-OpenMP-arm64
90
Magick.NET-Q16-x86
90
Magick.NET-Q16-OpenMP-x64
89
Magick.NET-Q16-HDRI-arm64
88
Magick.NET-Q16-arm64
88
Magick.NET-Q8-AnyCPU
88
Magick.NET-Q8-x86
84
Magick.NET-Q16-x64
83
Magick.NET-Q8-OpenMP-arm64
82
com.liferay.portal:release.dxp.bom
82
Magick.NET-Q8-arm64
82
Magick.NET-Q8-OpenMP-x64
80
typo3/cms-core
80
Magick.NET-Q8-x64
78
wwbn/avideo
73
microweber/microweber
72
apache-airflow
70
silverstripe/framework
67
concrete5/concrete5
65
craftcms/cms
65
thorsten/phpmyfaq
65
open-webui
64
n8n
62
magento/project-community-edition
59
drupal/core
57
phpmyadmin/phpmyadmin
56
dolibarr/dolibarr
56
Magick.NET-Q16-HDRI-OpenMP-x64
55
github.com/usememos/memos
54
librenms/librenms
54
org.keycloak:keycloak-services
51
mantisbt/mantisbt
49
apache-superset
47
symfony/symfony
45
code.gitea.io/gitea
44
Django
44
Magick.NET-Q16-OpenMP-x86
43
actionpack
42
nocodb
41
parse-server
40
snipe/snipe-it
39
drupal/drupal
37
hono
36
github.com/grafana/grafana
36
showdoc/showdoc
35
org.elasticsearch:elasticsearch
35
directus
34
shopware/platform
34
pypdf
34
admidio/admidio
33
picklescan
33
surrealdb
33
org.keycloak:keycloak-core
32
shopware/core
30
github.com/mattermost/mattermost-server/v6
30
nova
30
getgrav/grav
30
electron
30
mautic/core
29
ghost
29
plone
29
vllm
29
baserproject/basercms
29
intelliants/subrion
28
next
28
getkirby/cms
28
ansible
27
moin
27
aiohttp
26
gogs.io/gogs
26
rack
26
github.com/traefik/traefik/v3
25
k8s.io/kubernetes
25
flowise
24
froxlor/froxlor
24
statamic/cms
24
Plone
23
phpmyfaq/phpmyfaq
23
github.com/cilium/cilium
23
github.com/traefik/traefik/v2
23
axios
23
grumpydictator/firefly-iii
22
github.com/hashicorp/vault
22
django
22
gradio
21
nilsteampassnet/teampass
21
github.com/openfga/openfga
21
code.vikunja.io/api
21
DotNetNuke.Core
21
matrix-synapse
21
github.com/answerdev/answer
21
wasmtime
21
mediawiki/core
20
pyload-ng
20
kimai/kimai
20
org.apache.tomcat.embed:tomcat-embed-core
19
org.apache.struts:struts2-core
19
github.com/fleetdm/fleet/v4
19
shopware/shopware
19
dompurify
19
github.com/docker/docker
18
contao/core-bundle
18
remdex/livehelperchat
18
github.com/hashicorp/consul
17
github.com/argoproj/argo-cd/v2
17
salt
17
prestashop/prestashop
17
org.opencms:opencms-core
17
keystone
17
zendframework/zendframework1
16
github.com/hashicorp/nomad
16
io.undertow:undertow-core
16
sylius/sylius
16
github.com/siyuan-note/siyuan/kernel
16
nokogiri
16
rdiffweb
16
undici
16
weblate
15
glance
15
typo3/cms-backend
15
org.apache.jspwiki:jspwiki-main
15
org.springframework.security:spring-security-core
15
com.liferay.portal:com.liferay.portal.impl
15
org.xwiki.platform:xwiki-platform-oldcore
15
vyper
15
yetiforce/yetiforce-crm
15
io.netty:netty-codec-http
15
feehi/cms
14
github.com/traefik/traefik
14
feehi/feehicms
14
wagtail
14
pnpm
14
github.com/filebrowser/filebrowser/v2
14
astro
14
tinymce
14
activesupport
14
github.com/goharbor/harbor
14
github.com/zitadel/zitadel
13
vite
13
github.com/ethereum/go-ethereum
13
deno
13
org.eclipse.jetty:jetty-server
13
svelte
13
transformers
13
com.jfinal:jfinal
13
craftcms/commerce
13
puppet
13
Umbraco.Cms
13
tribalsystems/zenario
13
com.thoughtworks.xstream:xstream
13
coreutils
13
github.com/containerd/containerd
13
forkcms/forkcms
13
mistune
13
org.springframework:spring-webmvc
13
helm.sh/helm/v3
13
mermaid
12
github.com/apache/incubator-answer
12
roundup
12
ec-cube/ec-cube
12
simplesamlphp/simplesamlphp
12
phpoffice/phpspreadsheet
12
github.com/argoproj/argo-cd
12
lavalite/cms
12
@openzeppelin/contracts-upgradeable
12
facturascripts/facturascripts
12
@openzeppelin/contracts
12
OctoPrint
12
laravel/framework
12
github.com/openbao/openbao
12
mlflow
12
github.com/rancher/rancher
12
wallabag/wallabag
12
org.bouncycastle:bcprov-jdk14
12
genix/cms
11
org.keycloak:keycloak-parent
11
MessagePack
11
ci4-cms-erp/ci4ms
11
silverstripe/cms
11
zebrad
11
ckan
11
horizon
11
Filter by Repository
https://github.com/tensorflow/tensorflow
200
https://github.com/moodle/moodle
192
https://github.com/liferay/liferay-portal
143
https://github.com/jenkinsci/jenkins
109
https://github.com/pimcore/pimcore
85
https://github.com/TYPO3/typo3
63
https://github.com/microweber/microweber
63
https://github.com/apache/tomcat
60
https://github.com/usememos/memos
50
https://github.com/silverstripe/silverstripe-framework
50
https://github.com/django/django
50
https://github.com/xwiki/xwiki-platform
50
https://github.com/rails/rails
46
https://github.com/keycloak/keycloak
45
https://github.com/thorsten/phpmyfaq
45
https://github.com/apache/airflow
44
https://github.com/librenms/librenms
42
https://github.com/kubernetes/kubernetes
40
https://github.com/mattermost/mattermost
36
https://github.com/mantisbt/mantisbt
35
https://github.com/star7th/showdoc
32
https://github.com/mmaitre314/picklescan
30
https://github.com/concretecms/concretecms
28
https://github.com/symfony/symfony
27
https://github.com/mautic/mautic
27
https://github.com/grafana/grafana
27
https://github.com/ansible/ansible
26
https://github.com/spring-projects/spring-framework
26
https://github.com/phpmyadmin/phpmyadmin
26
https://github.com/craftcms/cms
26
https://github.com/shopware/shopware
24
https://github.com/argoproj/argo-cd
24
https://github.com/directus/directus
24
https://github.com/umbraco/Umbraco-CMS
23
https://github.com/Dolibarr/dolibarr
22
https://github.com/answerdev/answer
21
https://github.com/snipe/snipe-it
20
https://github.com/plone/Products.CMFPlone
20
https://github.com/magento/magento2
20
https://github.com/apache/activemq
20
https://github.com/firefly-iii/firefly-iii
20
https://github.com/cilium/cilium
19
https://github.com/openstack/nova
18
https://github.com/livehelperchat/livehelperchat
18
https://github.com/contao/contao
18
https://github.com/apache/struts
17
https://github.com/ikus060/rdiffweb
16
https://github.com/matrix-org/synapse
16
https://github.com/shopware/platform
16
https://github.com/gradio-app/gradio
16
https://github.com/getkirby/kirby
15
https://github.com/apache/cxf
15
https://github.com/netty/netty
15
https://github.com/CVEProject/cvelist
15
https://github.com/vyperlang/vyper
15
https://github.com/froxlor/froxlor
14
https://github.com/OpenNMS/opennms
14
https://github.com/tinymce/tinymce
14
https://github.com/moby/moby
14
https://github.com/TYPO3/TYPO3.CMS
14
https://github.com/baserproject/basercms
14
https://github.com/geoserver/geoserver
14
https://github.com/x-stream/xstream
14
https://github.com/yetiforcecompany/yetiforcecrm
14
https://github.com/saltstack/salt
14
https://github.com/PaddlePaddle/Paddle
14
https://github.com/openfga/openfga
13
https://github.com/octobercms/october
13
https://github.com/goharbor/harbor
13
https://github.com/strapi/strapi
13
https://github.com/containerd/containerd
13
https://github.com/bcgit/bc-java
13
https://github.com/nilsteampassnet/TeamPass
13
https://github.com/PrestaShop/PrestaShop
13
https://github.com/go-gitea/gitea
13
https://github.com/rack/rack
13
https://github.com/apache/nifi
13
https://github.com/traefik/traefik
12
https://github.com/TYPO3-CMS/core
12
https://github.com/helm/helm
12
https://github.com/hashicorp/consul
12
https://github.com/huggingface/transformers
12
https://github.com/openstack/keystone
12
https://github.com/OpenZeppelin/openzeppelin-contracts
12
https://github.com/ethereum/go-ethereum
11
https://github.com/rancher/rancher
11
https://github.com/vaadin/platform
11
https://github.com/apache/zeppelin
11
https://github.com/laravel/framework
11
https://github.com/surrealdb/surrealdb
11
https://github.com/intelliants/subrion
11
https://github.com/forkcms/forkcms
11
https://github.com/github/advisory-database
11
https://github.com/dnnsoftware/Dnn.Platform
11
https://github.com/electron/electron
11
https://github.com/ckeditor/ckeditor4
11
https://github.com/vitejs/vite
11
https://github.com/TryGhost/Ghost
10
https://github.com/laurent22/joplin
10
https://github.com/PHPOffice/PhpSpreadsheet
10
https://github.com/simplesamlphp/simplesamlphp
10
https://github.com/vercel/next.js
10
https://github.com/bytecodealliance/wasmtime
10
https://github.com/decidim/decidim
10
https://github.com/backstage/backstage
10
https://github.com/vllm-project/vllm
10
https://github.com/liufee/cms
10
https://github.com/wallabag/wallabag
10
https://github.com/aio-libs/aiohttp
10
https://github.com/greenpau/caddy-security
10
https://github.com/opencast/opencast
9
https://github.com/OctoPrint/OctoPrint
9
https://github.com/jquery/jquery
9
https://github.com/dotnet/runtime
9
https://github.com/alkacon/opencms-core
9
https://github.com/puppetlabs/puppet
9
https://github.com/urllib3/urllib3
9
https://github.com/pimcore/admin-ui-classic-bundle
9
https://github.com/dpgaspar/Flask-AppBuilder
9
https://github.com/jenkinsci/git-plugin
9
https://github.com/publify/publify
9
https://github.com/sparklemotion/nokogiri
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/thorsten/phpMyFAQ
9
https://github.com/parse-community/parse-server
8
https://github.com/pyload/pyload
8
https://github.com/modoboa/modoboa
8
https://github.com/LavaLite/cms
8
https://github.com/ckan/ckan
8
https://github.com/gogs/gogs
8
https://github.com/openstack/glance
8
https://github.com/zendframework/zendframework
8
https://github.com/opensearch-project/security
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/getgrav/grav
8
https://github.com/dolibarr/dolibarr
8
https://github.com/rails/rails-html-sanitizer
8
https://github.com/eclipse/jetty.project
8
https://github.com/onionshare/onionshare
8
https://github.com/hashicorp/nomad
8
https://github.com/pandao/editor.md
8
https://github.com/nilsteampassnet/teampass
8
https://github.com/FlowiseAI/Flowise
8
https://github.com/openbao/openbao
8
https://github.com/kubeedge/kubeedge
8
https://github.com/sulu/sulu
8
https://github.com/rubygems/rubygems
8
https://github.com/apache/superset
8
https://github.com/opencontainers/runc
7
https://github.com/treeverse/lakeFS
7
https://github.com/twbs/bootstrap
7
https://github.com/louislam/uptime-kuma
7
https://github.com/dragonflyoss/dragonfly
7
https://github.com/OPCFoundation/UA-.NETStandard
7
https://github.com/croogo/croogo
7
https://github.com/kubevirt/kubevirt
7
https://github.com/nocodb/nocodb
7
https://github.com/opencv/opencv
7
https://github.com/StarCitizenTools/mediawiki-skins-Citizen
7
https://github.com/n8n-io/n8n
7
https://github.com/Sylius/Sylius
7
https://github.com/python-pillow/Pillow
7
https://github.com/openstack/horizon
7
https://github.com/zenml-io/zenml
7
https://github.com/hashicorp/vault
7
https://github.com/chakra-core/ChakraCore
7
https://github.com/containers/podman
7
https://github.com/scrapy/scrapy
7
https://github.com/vaadin/flow
7
https://github.com/kevinpapst/kimai2
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/Leantime/leantime
7
https://github.com/vega/vega
7
https://github.com/matrix-org/matrix-rust-sdk
7
https://github.com/denoland/deno
7
https://github.com/zitadel/zitadel
7
https://github.com/google/fscrypt
7
https://github.com/undertow-io/undertow
7
https://github.com/janeczku/calibre-web
7
https://github.com/py-pdf/pypdf
7
https://github.com/jupyter/notebook
7
https://github.com/jeecgboot/jeecg-boot
7
https://github.com/bagisto/bagisto
7
https://github.com/igniterealtime/Openfire
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/modxcms/revolution
7
https://github.com/nahsra/antisamy
7
https://github.com/jenkinsci/fortify-on-demand-uploader-plugin
6
https://github.com/psf/requests
6
https://github.com/roundup-tracker/roundup
6
https://github.com/pmmp/PocketMine-MP
6
https://github.com/run-llama/llama_index
6
https://github.com/panva/jose
6
https://github.com/d4wner/Vulnerabilities-Report
6
https://github.com/wagtail/wagtail
6
https://github.com/NodeBB/NodeBB
6
https://github.com/jenkinsci/config-file-provider-plugin
6
https://github.com/yiisoft/yii2
6
https://github.com/withastro/astro
6