CRITICAL9.1
GO-2026-4464
Mattermost Server has X.509 Improper Certificate Validation in github.com/mattermost/mattermost-server
Quick fix
GO-2026-4464 — github.com/mattermost/mattermost-server: upgrade to the fixed version with the command below.
go get github.com/mattermost/mattermost-server@v3.6.7-rc1+incompatibleDetails
Mattermost Server has X.509 Improper Certificate Validation in github.com/mattermost/mattermost-server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/mattermost/mattermost-server
Introduced in:
0Fixed in: 3.6.7-rc1+incompatibleFix
go get github.com/mattermost/mattermost-server@v3.6.7-rc1+incompatibleReferences
- https://github.com/advisories/GHSA-m462-mqw4-2c8m[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2017-18911[ADVISORY]
- https://github.com/mattermost/mattermost/commit/222bce0c5c1abb2f58c3a6de1fe8c5d3accffb21[WEB]
- https://github.com/mattermost/mattermost/commit/691c18157025d4808b5b11de1d6de01050e54fa6[WEB]
- https://github.com/mattermost/mattermost/commit/e9bb8cdfb4915067349a4840ab15ff941c4eb070[WEB]
- https://mattermost.com/security-updates[WEB]