Go/github.com/mattermost/mattermost/server/v8 CVE-2025-35965: high 7.5, EPSS 0.40%

Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250218121836-2b5275d87136 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250218121836-2b5275d87136

Affected

Fixed versions

Sources

• osv: GO-2025-3643#Go/github.com/mattermost/mattermost/server/v8
• nvd: CVE-2025-35965
• https://github.com/advisories/GHSA-689c-xq7x-xjwf
• https://github.com/mattermost/mattermost-plugin-playbooks/commit/bf2633dad09f5768ce2bea4b7c5ffb74050052a8
• https://github.com/mattermost/mattermost/commit/2b5275d87136f07e016c8eca09a2f004b31afc8a
• https://mattermost.com/security-updates

CVE-2025-35965 · published 2025-04-24T18:14:57Z · modified 2026-02-04T03:27:32.062555Z · JSON