{"action":"Upgrade github.com/mattermost/mattermost-plugin-boards to 0.0.0-20260108044135-57c5be5b6ef5 or later.","affected":[{"introduced":"0"}],"component":"github.com/mattermost/mattermost-plugin-boards","cve_ids":["CVE-2026-2461"],"ecosystem":"Go","epss":0.00165,"exploited":false,"fixed_versions":["0.0.0-20260108044135-57c5be5b6ef5"],"ghsa_id":"GHSA-hf8w-x9h5-5gf9","id":"tcs_01M5KGG1HPM7DBX1R2M6AD3KB3","modified_at":"2026-03-23T18:45:19.047130Z","published_at":"2026-03-23T18:16:14Z","references":["https://osv.dev/vulnerability/GO-2026-4782","https://github.com/advisories/GHSA-hf8w-x9h5-5gf9","https://nvd.nist.gov/vuln/detail/CVE-2026-2461","https://github.com/mattermost/mattermost-plugin-boards/commit/57c5be5b6ef59d02dd72e35094d1fae8ba6e9619","https://mattermost.com/security-updates"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4782","url":"https://osv.dev/vulnerability/GO-2026-4782"}],"summary":"Mattermost Boards Plugin fails to implement authorisation checks on comment block modifications in github.com/mattermost/mattermost-plugin-boards"}