tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-27933: medium 4.3, EPSS 0.21%

Mattermost allows members with permission to convert public channels to private and convert private to public in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.9+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.11.9+incompatible
go get github.com/mattermost/mattermost-server@v10.3.4+incompatible
go get github.com/mattermost/mattermost-server@v10.4.3+incompatible

Affected

introducedfixedlast affected
9.11.0+incompatible9.11.9+incompatible-
10.3.0+incompatible10.3.4+incompatible-
10.4.0+incompatible10.4.3+incompatible-

Fixed versions

9.11.9+incompatible10.3.4+incompatible10.4.3+incompatible

Sources

CVE-2025-27933 · published · modified · JSON