Go/github.com/mattermost/mattermost/server/v8 CVE-2025-54499: low 3.1, EPSS 0.27%

Mattermost has an Observable Timing Discrepancy vulnerability

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250728063359-38208b8f065f or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250728063359-38208b8f065f

Affected

Fixed versions

Sources

• osv: GHSA-xr3w-rmvj-f6m7
• https://nvd.nist.gov/vuln/detail/CVE-2025-54499
• https://github.com/mattermost/mattermost/commit/38208b8f065f0786eac0e968f9d754b91b62878c
• https://github.com/mattermost/mattermost/commit/97a4c7839cf5610cfe17c52042878aebb7678372
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

CVE-2025-54499 · published 2025-10-16T09:30:24Z · modified 2025-11-05T19:57:38.749472Z · JSON