tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-20621: high 7.5, EPSS 0.48%

Mattermost webapp crash via a crafted post in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.6+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.11.6+incompatible
go get github.com/mattermost/mattermost-server@v10.0.4+incompatible
go get github.com/mattermost/mattermost-server@v10.1.4+incompatible
go get github.com/mattermost/mattermost-server@v10.2.1+incompatible

Affected

introducedfixedlast affected
9.11.0+incompatible9.11.6+incompatible-
10.0.0+incompatible10.0.4+incompatible-
10.1.0+incompatible10.1.4+incompatible-
10.2.0+incompatible10.2.1+incompatible-

Fixed versions

9.11.6+incompatible10.0.4+incompatible10.1.4+incompatible10.2.1+incompatible

Sources

CVE-2025-20621 · published · modified · JSON