Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/mattermost/mattermost-plugin-msteams

4 known vulnerabilities (1 high, 1 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 1 medium, 2 low
Registry
pkg.go.dev

Advisories 4

  • Unbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook Endpoint

    Affected: fixed in 1.15.1-0.20260213190728-6fe4d295592e.

  • Unbounded Request Body Read in MS Teams Plugin {{/lifecycle}} Webhook Endpoint

    Affected: fixed in 1.15.1-0.20260213190728-6fe4d295592e.

  • MS Teams plugin sensitive config values not properly masked in support packets

    Affected: fixed in 1.15.1-0.20260102165339-036c761bd3cb.

  • CVE-2025-27936Medium 5.3

    Webhook Secret Exposure via Timing attack in MSteams plugin

    Affected: fixed in 2.1.0; all versions.