Security Advisories for github.com/mattermost/mattermost-plugin-github in go
Moderate
3 months ago
Mattermost allows authenticated users to gain access to private repositories
go
github.com/mattermost/mattermost-plugin-github, github.com/mattermost/mattermost-server
Moderate
3 months ago
Mattermost doesn't validate user-supplied input in API request handlers
go
github.com/mattermost/mattermost-plugin-github, github.com/mattermost/mattermost-server
High
3 months ago
Mattermost doesn't enforce request body size limits on plugin HTTP endpoints
go
github.com/mattermost/mattermost-plugin-github, github.com/mattermost/mattermost-server
Low
8 months ago
Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection
go
github.com/mattermost/mattermost-plugin-github, github.com/mattermost/mattermost, github.com/mattermost/mattermost/server/v8