Cloudanix VulnDB

GO-2025-4256

None

CVSS

—

EPSS

—

Published

Dec 30, 2025

CISA due date

—

The record

Mattermost has an Invite Token Replay Vulnerability via Channel Membership Manipulation in github.com/mattermost/mattermost

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/mattermost/mattermost 10.11.0-rc1 10.11.5
Go github.com/mattermost/mattermost 10.11.0-rc1+incompatible 10.11.5+incompatible
Go github.com/mattermost/mattermost 10.12.0 10.12.2
Go github.com/mattermost/mattermost 11.0.0-alpha.1 11.0.4
Go github.com/mattermost/mattermost-server 0 11.0.4+incompatible
Go github.com/mattermost/mattermost-server 0 11.0.4
Go github.com/mattermost/mattermost-server/v5 0 No fix
Go github.com/mattermost/mattermost-server/v6 0 No fix
Go github.com/mattermost/mattermost/server/v8 0 8.0.0-20251031095924-e7e23b94e006
go github.com/mattermost/mattermost 10.11.0-rc1 10.11.5
go github.com/mattermost/mattermost 10.12.0 10.12.2
go github.com/mattermost/mattermost 11.0.0-alpha.1 11.0.4

Related vulnerabilities