tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-6226: medium 6.5, EPSS 0.37%

Mattermost Missing Authentication for Critical Function in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.17+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.11.17+incompatible
go get github.com/mattermost/mattermost-server@v10.5.7+incompatible
go get github.com/mattermost/mattermost-server@v10.7.4+incompatible
go get github.com/mattermost/mattermost-server@v10.8.2+incompatible

Affected

introducedfixedlast affected
9.11.0+incompatible9.11.17+incompatible-
10.5.0+incompatible10.5.7+incompatible-
10.7.0+incompatible10.7.4+incompatible-
10.8.0+incompatible10.8.2+incompatible-

Fixed versions

9.11.17+incompatible10.5.7+incompatible10.7.4+incompatible10.8.2+incompatible

Sources

CVE-2025-6226 · published · modified · JSON