Go/github.com/mattermost/mattermost-plugin-msteams CVE-2026-2476: high 7.6, EPSS 0.18%

Mattermost Microsoft Teams Plugin fails to properly mask sensitive configuration values

Action: Upgrade github.com/mattermost/mattermost-plugin-msteams to 1.15.1-0.20260102165339-036c761bd3cb or later.

go get github.com/mattermost/mattermost-plugin-msteams@v1.15.1-0.20260102165339-036c761bd3cb

Affected

Fixed versions

Sources

• osv: GHSA-4ppj-6chv-5pgc
• https://nvd.nist.gov/vuln/detail/CVE-2026-2476
• https://github.com/mattermost/mattermost-plugin-msteams/commit/036c761bd3cb9ece92c17f2b151dfa906cebdcf6
• https://github.com/mattermost/mattermost-plugin-msteams
• https://mattermost.com/security-updates

CVE-2026-2476 · published 2026-03-16T15:30:43Z · modified 2026-03-23T18:56:06.542195Z · JSON