Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection
Modified: 12/22/2025
package
pkg:go/github.com/mattermost/mattermost-plugin-github
Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection
Modified: 12/22/2025
Mattermost doesn't enforce request body size limits on plugin HTTP endpoints
Modified: 7/7/2026
Mattermost allows authenticated users to gain access to private repositories
Modified: 7/7/2026
Mattermost doesn't validate user-supplied input in API request handlers
Modified: 7/7/2026
Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection in github.com/mattermost/mattermost
Modified: 3/3/2026
Mattermost doesn't validate user-supplied input in API request handlers in github.com/mattermost/mattermost-plugin-github
Modified: 7/7/2026
Mattermost doesn't enforce request body size limits on plugin HTTP endpoints in github.com/mattermost/mattermost-plugin-github
Modified: 7/7/2026
Mattermost allows authenticated users to gain access to private repositories in github.com/mattermost/mattermost-plugin-github
Modified: 7/7/2026