CVE-2026-6345

6 advisories.

Go/github.com/mattermost/mattermost/server/v8 CVE-2026-6345: medium 6.5, EPSS 0.39%

Mattermost doesn't prevent disclosure of created user password

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20260311102650-3057ae7e83e9 or later.

go get github.com/mattermost/mattermost/server/v8@v11.5.2

go get github.com/mattermost/mattermost/server/v8@v10.11.14

go get github.com/mattermost/mattermost/server/v8@v11.4.4

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20260311102650-3057ae7e83e9

Affected

introduced	fixed	last affected
11.5.0	11.5.2	-
10.11.0	10.11.14	-
11.4.0	11.4.4	-
0	8.0.0-20260311102650-3057ae7e83e9	-

Fixed versions

11.5.2

10.11.14

11.4.4

8.0.0-20260311102650-3057ae7e83e9

Sources

CVE-2026-6345 · published 2026-05-18T09:31:48Z · modified 2026-06-25T23:11:34.114532854Z · JSON

Go/github.com/mattermost/mattermost-server CVE-2026-6345: medium 6.5, EPSS 0.39%

Mattermost doesn't prevent disclosure of created user password

Action: Upgrade github.com/mattermost/mattermost-server to 5.3.2-0.20260311102650-3057ae7e83e9 or later.

go get github.com/mattermost/mattermost-server@v5.3.2-0.20260311102650-3057ae7e83e9

Affected

introduced	fixed	last affected
0	5.3.2-0.20260311102650-3057ae7e83e9	-

Fixed versions

5.3.2-0.20260311102650-3057ae7e83e9

Sources

CVE-2026-6345 · published 2026-05-18T09:31:48Z · modified 2026-06-25T23:11:34.114532854Z · JSON

Go/github.com/mattermost/mattermost-server CVE-2026-6345: unknown, EPSS 0.39%

Mattermost doesn't prevent disclosure of created user password in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 10.11.14+incompatible or later.

go get github.com/mattermost/mattermost-server@v10.11.14+incompatible

go get github.com/mattermost/mattermost-server@v11.4.4+incompatible

go get github.com/mattermost/mattermost-server@v11.5.2+incompatible

Affected

introduced	fixed	last affected
10.11.0+incompatible	10.11.14+incompatible	-
11.4.0+incompatible	11.4.4+incompatible	-
11.5.0+incompatible	11.5.2+incompatible	-

Fixed versions

10.11.14+incompatible

11.4.4+incompatible

11.5.2+incompatible

Sources

CVE-2026-6345 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:42.662891056Z · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2026-6345: unknown, EPSS 0.39%

Mattermost doesn't prevent disclosure of created user password in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-6345 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:42.662891056Z · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2026-6345: unknown, EPSS 0.39%

Mattermost doesn't prevent disclosure of created user password in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-6345 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:42.662891056Z · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2026-6345: unknown, EPSS 0.39%

Mattermost doesn't prevent disclosure of created user password in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20260311102650-3057ae7e83e9 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20260311102650-3057ae7e83e9

Affected

introduced	fixed	last affected
0	8.0.0-20260311102650-3057ae7e83e9	-

Fixed versions

8.0.0-20260311102650-3057ae7e83e9

Sources

CVE-2026-6345 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:42.662891056Z · JSON