tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-9072: medium 5.4, EPSS 0.18%

Mattermost Open Redirect vulnerability in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 10.5.10+incompatible or later.

go get github.com/mattermost/mattermost-server@v10.5.10+incompatible
go get github.com/mattermost/mattermost-server@v10.9.5+incompatible
go get github.com/mattermost/mattermost-server@v10.10.2+incompatible

Affected

introducedfixedlast affected
10.5.0+incompatible10.5.10+incompatible-
10.9.0+incompatible10.9.5+incompatible-
10.10.0+incompatible10.10.2+incompatible-

Fixed versions

10.5.10+incompatible10.9.5+incompatible10.10.2+incompatible

Sources

CVE-2025-9072 · published · modified · JSON