GoPackage

github.com/mattermost/mattermost-plugin-confluence

14 known vulnerabilities (5 high, 7 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 14 · 5 high, 7 medium, 2 low

Registry: pkg.go.dev

Advisories 14

CVE-2025-13523High 7.7
Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow
Affected: fixed in 1.7.0.
CVE-2025-8285Medium 4.0
Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-54525High 7.5
Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-54478High 7.2
Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-54463Medium 5.9
Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-54458Medium 5.0
Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-53910Medium 4.0
Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-53857Low 3.7
Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-53514Medium 5.9
Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-52931High 7.5
Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-49221Low 3.7
Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-48731Medium 6.4
Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-44004High 7.2
Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.
CVE-2025-44001Medium 4.0
Unauthorized Channel Subscription Read in Mattermost Confluence Plugin
Affected: fixed in 1.5.0.