VDB
KO

GO-2026-5817

Mattermost doesn't validate file ownership and access control in github.com/mattermost/mattermost-server

Details

Mattermost doesn't validate file ownership and access control in github.com/mattermost/mattermost-server

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/mattermost/mattermost-server
Introduced in: 10.11.0+incompatible Fixed in: 10.11.15+incompatible
Fix go get github.com/mattermost/mattermost-server@v10.11.15+incompatible

References