Cloudanix VulnDB

GO-2025-4133

None

CVSS

—

EPSS

—

Published

Nov 25, 2025

CISA due date

—

The record

Mattermost allows other users to determine when users had read channels via channel member objects in github.com/mattermost/mattermost-server

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/mattermost/mattermost-server 10.11.0 10.11.4
Go github.com/mattermost/mattermost-server 10.5.0 10.5.12
Go github.com/mattermost/mattermost-server 10.5.0+incompatible 10.5.12+incompatible
Go github.com/mattermost/mattermost-server/v5 0 No fix
Go github.com/mattermost/mattermost-server/v6 0 No fix
Go github.com/mattermost/mattermost/server/v8 0 No fix
Go github.com/mattermost/mattermost/server/v8 0 8.0.0-20250905150616-ba86dfc5876b6
go github.com/mattermost/mattermost-server 10.11.0 10.11.4
go github.com/mattermost/mattermost-server 10.5.0 10.5.12

Related vulnerabilities