CVE-2025-12689
2 advisories.
Go/github.com/mattermost/mattermost-plugin-calls CVE-2025-12689: medium 6.5, EPSS 0.29%
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in
Action: Upgrade github.com/mattermost/mattermost-plugin-calls to 1.11.0 or later.
go get github.com/mattermost/mattermost-plugin-calls@v1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: GHSA-j5vq-62gr-8v3r
- https://nvd.nist.gov/vuln/detail/CVE-2025-12689
- https://github.com/mattermost/mattermost-plugin-calls/commit/f68b41980e1274e05cf91c687e2af1a73c5e36ca
- https://github.com/mattermost/mattermost
- https://mattermost.com/security-updates
CVE-2025-12689 · published · modified · JSON
Go/github.com/mattermost/mattermost-plugin-calls CVE-2025-12689: medium 6.5, EPSS 0.29%
Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls
Action: Upgrade github.com/mattermost/mattermost-plugin-calls to 1.11.0 or later.
go get github.com/mattermost/mattermost-plugin-calls@v1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: GO-2025-4255
- nvd: CVE-2025-12689
- https://github.com/advisories/GHSA-j5vq-62gr-8v3r
- https://github.com/mattermost/mattermost-plugin-calls/commit/f68b41980e1274e05cf91c687e2af1a73c5e36ca
- https://mattermost.com/security-updates
CVE-2025-12689 · published · modified · JSON