tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-3913: low 3.8, EPSS 0.33%

Mattermost improperly allows team administrators to modify team invites in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.13+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.11.13+incompatible
go get github.com/mattermost/mattermost-server@v10.5.4+incompatible
go get github.com/mattermost/mattermost-server@v10.6.3+incompatible
go get github.com/mattermost/mattermost-server@v10.7.1+incompatible

Affected

introducedfixedlast affected
9.0.0-rc1+incompatible9.11.13+incompatible-
10.5.0-rc1+incompatible10.5.4+incompatible-
10.6.0-rc1+incompatible10.6.3+incompatible-
10.7.0-rc1+incompatible10.7.1+incompatible-

Fixed versions

9.11.13+incompatible10.5.4+incompatible10.6.3+incompatible10.7.1+incompatible

Sources

CVE-2025-3913 · published · modified · JSON