tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-31947: medium 5.3, EPSS 0.35%

Mattermost Fails to Lockout LDAP Users After Repeated Login Failures in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.12+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.11.12+incompatible
go get github.com/mattermost/mattermost-server@v10.4.5+incompatible
go get github.com/mattermost/mattermost-server@v10.5.3+incompatible
go get github.com/mattermost/mattermost-server@v10.6.2+incompatible

Affected

introducedfixedlast affected
9.11.0+incompatible9.11.12+incompatible-
10.4.0+incompatible10.4.5+incompatible-
10.5.0+incompatible10.5.3+incompatible-
10.6.0+incompatible10.6.2+incompatible-

Fixed versions

9.11.12+incompatible10.4.5+incompatible10.5.3+incompatible10.6.2+incompatible

Sources

CVE-2025-31947 · published · modified · JSON