tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-6465: unknown, EPSS 0.77%

Mattermost Fails to Sanitize File Names in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 10.5.9+incompatible or later.

go get github.com/mattermost/mattermost-server@v10.5.9+incompatible
go get github.com/mattermost/mattermost-server@v10.8.4+incompatible
go get github.com/mattermost/mattermost-server@v10.9.4+incompatible
go get github.com/mattermost/mattermost-server@v10.10.1+incompatible

Affected

introducedfixedlast affected
10.5.0+incompatible10.5.9+incompatible-
10.8.0+incompatible10.8.4+incompatible-
10.9.0+incompatible10.9.4+incompatible-
10.10.0+incompatible10.10.1+incompatible-

Fixed versions

10.5.9+incompatible10.8.4+incompatible10.9.4+incompatible10.10.1+incompatible

Sources

CVE-2025-6465 · published · modified · JSON