Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
Go github.com/mattermost/mattermost-plugin-boards < 0.0.0-20260108044135-57c5be5b6ef5
Fixed in
0.0.0-20260108044135-57c5be5b6ef5· Vendor fix available
Issue
Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Advisory ID: MMSA-2025-00559
Recommended action: Upgrade to 0.0.0-20260108044135-57c5be5b6ef5 (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Go github.com/mattermost/mattermost-plugin-boards < 0.0.0-20250716054606-3f3e3becfe1d
Fixed in
0.0.0-20250716054606-3f3e3becfe1d· Vendor fix available
Issue
Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration
Recommended action: Upgrade to 0.0.0-20250716054606-3f3e3becfe1d (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.