Cloudanix VulnDB

GO-2025-4248

None

CVSS

—

EPSS

—

Published

Jan 14, 2026

CISA due date

—

The record

Mattermost has missing redirect URL validation in github.com/mattermost/mattermost

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/mattermost/mattermost 10.11.0-rc1 10.11.5-0.20251016131338-dad6bd7a1509
Go github.com/mattermost/mattermost 10.11.0-rc1+incompatible 11.1.0+incompatible
Go github.com/mattermost/mattermost 11.0.0-alpha.1 11.1.0
Go github.com/mattermost/mattermost-server 0 No fix
Go github.com/mattermost/mattermost-server/v5 0 No fix
Go github.com/mattermost/mattermost-server/v6 0 No fix
Go github.com/mattermost/mattermost/server/v8 8.0.0-20250721062209-4952acea88ce 8.0.0-20251016131338-dad6bd7a1509
go github.com/mattermost/mattermost 11.0.0-alpha.1 11.1.0
go github.com/mattermost/mattermost/server/v8 8.0.0-20250721062209-4952acea88ce 8.0.0-20251016131338-dad6bd7a1509

Related vulnerabilities