{"action":"Upgrade github.com/mattermost/mattermost-server to 8.1.12+incompatible or later.","affected":[{"fixed":"8.1.12+incompatible","introduced":"8.1.0+incompatible"},{"fixed":"9.4.5+incompatible","introduced":"9.4.0+incompatible"},{"fixed":"9.5.3+incompatible","introduced":"9.5.0+incompatible"},{"fixed":"9.6.1+incompatible","introduced":"9.6.0-rc1+incompatible"}],"component":"github.com/mattermost/mattermost-server","cve_ids":["CVE-2024-4183"],"ecosystem":"Go","epss":0.00611,"exploited":false,"fixed_versions":["8.1.12+incompatible","9.4.5+incompatible","9.5.3+incompatible","9.6.1+incompatible"],"ghsa_id":"GHSA-wj37-mpq9-xrcm","id":"tcs_01M5KG2XGM0F44JAAN7KVD1ZBC","modified_at":"2026-03-03T04:55:18.386573Z","published_at":"2024-06-05T15:10:52Z","references":["https://osv.dev/vulnerability/GO-2024-2798","https://github.com/advisories/GHSA-wj37-mpq9-xrcm","https://nvd.nist.gov/vuln/detail/CVE-2024-4183","https://github.com/mattermost/mattermost/commit/86920d641760552c5aafa5e1d14c93bd30039bc4","https://github.com/mattermost/mattermost/commit/9d81eee979aee93374bff8ba6714d805e12ffb03","https://github.com/mattermost/mattermost/commit/b45c3dac4c160992a1ce757ade968e8f5ec506c1","https://github.com/mattermost/mattermost/commit/bc699e6789cf3ba1544235087897699aaa639e7d","https://mattermost.com/security-updates"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2798","url":"https://osv.dev/vulnerability/GO-2024-2798"}],"summary":"Mattermost fails to limit the number of active sessions in github.com/mattermost/mattermost-server"}