VDB
KO

GO-2026-5238

Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls

Details

Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin in github.com/mattermost/mattermost-plugin-calls

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/mattermost/mattermost-plugin-calls
Introduced in: 0 Fixed in: 1.12.0-rc2
Fix go get github.com/mattermost/mattermost-plugin-calls@v1.12.0-rc2
Go / github.com/mattermost/mattermost-server
Introduced in: 10.11.0+incompatible Fixed in: 10.11.14+incompatible
Fix go get github.com/mattermost/mattermost-server@v10.11.14+incompatible

References