Go/github.com/mattermost/mattermost/server/v8 CVE-2025-20621: high 7.5, EPSS 0.48%

Mattermost webapp crash via a crafted post in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20241127161322-25ff7a3779a5 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20241127161322-25ff7a3779a5

Affected

Fixed versions

Sources

• osv: GO-2025-3407#Go/github.com/mattermost/mattermost/server/v8
• nvd: CVE-2025-20621
• https://github.com/advisories/GHSA-w6xh-c82w-h997
• https://mattermost.com/security-updates

CVE-2025-20621 · published 2025-01-17T21:48:34Z · modified 2026-02-04T02:47:10.000803Z · JSON