Go/github.com/mattermost/mattermost-plugin-boards CVE-2025-9081: low 3.1, EPSS 0.27%

Mattermost boards plugin fails to restrict download access to files

Action: Upgrade github.com/mattermost/mattermost-plugin-boards to 0.0.0-20250716054606-3f3e3becfe1d or later.

go get github.com/mattermost/mattermost-plugin-boards@v0.0.0-20250716054606-3f3e3becfe1d

Affected

Fixed versions

Sources

• osv: GHSA-f72g-52v7-mg3p
• https://nvd.nist.gov/vuln/detail/CVE-2025-9081
• https://github.com/mattermost/mattermost-plugin-boards/pull/114
• https://github.com/mattermost/mattermost-plugin-boards/commit/3f3e3becfe1d66db0d0f4fd235f04afd6e1ec40b
• https://github.com/mattermost/mattermost-plugin-boards
• https://mattermost.com/security-updates
• https://pkg.go.dev/vuln/GO-2025-3978

CVE-2025-9081 · published 2025-09-19T21:31:21Z · modified 2025-09-26T16:23:18Z · JSON