{"action":"Upgrade github.com/mattermost/mattermost-server to 9.1.5+incompatible or later.","affected":[{"fixed":"9.1.5+incompatible","introduced":"9.1.0+incompatible"},{"fixed":"9.2.4+incompatible","introduced":"9.2.0+incompatible"}],"component":"github.com/mattermost/mattermost-server","cve_ids":["CVE-2024-1402"],"ecosystem":"Go","epss":0.0052,"exploited":false,"fixed_versions":["9.1.5+incompatible","9.2.4+incompatible"],"ghsa_id":"GHSA-32h7-7j94-8fc2","id":"tcs_01M5KG1CR3XKSP27KDZWN1BGXV","modified_at":"2026-02-04T04:21:26.117690Z","published_at":"2024-06-28T15:28:53Z","references":["https://osv.dev/vulnerability/GO-2024-2541","https://github.com/advisories/GHSA-32h7-7j94-8fc2","https://nvd.nist.gov/vuln/detail/CVE-2024-1402","https://github.com/mattermost/mattermost/commit/64cb0ca8af2dbda1afcddd1604460591a4799b81","https://github.com/mattermost/mattermost/commit/6d2440de9fd774b67e65e3aac4ab8b6ef9aba2d8","https://github.com/mattermost/mattermost/commit/81190e2da128a6985914ea7023a69ac400513fc4","https://mattermost.com/security-updates"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2541","url":"https://osv.dev/vulnerability/GO-2024-2541"}],"summary":"Mattermost vulnerable to denial of service via large number of emoji reactions in github.com/mattermost/mattermost-server"}