{"action":"Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-202508080704-39bd251fe4f600 or later.","affected":[{"fixed":"8.0.0-202508080704-39bd251fe4f600","introduced":"0"}],"component":"github.com/mattermost/mattermost/server/v8","cve_ids":["CVE-2025-9084"],"ecosystem":"Go","epss":0.00172,"exploited":false,"fixed_versions":["8.0.0-202508080704-39bd251fe4f600"],"ghsa_id":"GHSA-hm95-jx66-g2gh","id":"tcs_01M5KFCQYYN5S7R6Q3H9P5B1CM","modified_at":"2025-09-17T17:42:24.520016Z","published_at":"2025-09-15T12:31:25Z","references":["https://osv.dev/vulnerability/GHSA-hm95-jx66-g2gh","https://nvd.nist.gov/vuln/detail/CVE-2025-9084","https://github.com/mattermost/mattermost/commit/39bd251fe4f66b7e847fc6d653221886347ff160","https://github.com/mattermost/mattermost","https://mattermost.com/security-updates"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-hm95-jx66-g2gh","url":"https://osv.dev/vulnerability/GHSA-hm95-jx66-g2gh"}],"summary":"Mattermost Open Redirect vulnerability"}