Go/github.com/mattermost/focalboard CVE-2026-25773: medium 6.5, EPSS 0.31%

Focalboard doesn't sanitize category IDs before incorporating them into dynamic SQL statements in github.com/mattermost/focalboard

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5524
• nvd: CVE-2026-25773
• https://github.com/advisories/GHSA-p32q-v29x-wq9r

CVE-2026-25773 · published 2026-06-25T22:34:34Z · modified 2026-06-25T23:01:19.249716670Z · JSON