Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/mattermost/mattermost-plugin-github

4 known vulnerabilities (3 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 medium, 1 low
Registry
pkg.go.dev

Advisories 4

  • CVE-2026-28735Medium 5.4

    GitHub OAuth Scope Validation

    Affected: fixed in 1.0.1-0.20260318132218-6e6b740c4852.

  • CVE-2026-4646Medium 4.3

    Insufficient input validation in GitHub plugin API causes denial of service

    Affected: fixed in 1.0.1-0.20260330164815-c2840e980b3c.

  • CVE-2026-5308Medium 4.9

    Missing request body size limits on Zoom plugin HTTP endpoints

    Affected: fixed in 1.0.1-0.20260410143745-9b41b1fd43c4.

  • Mattermost GitHub Plugin allows unauthorized GitHub reactions via reaction forwarding hijacking

    Affected: fixed in 1.0.1-0.20250829075715-0deffcfc6bee.