VDB
Sign up
LOW3.8

GHSA-xgqm-wp7w-mgg2

Mattermost Desktop App allows for bypassing TCC restrictions on macOS

Quick fix

GHSA-xgqm-wp7w-mgg2 — mattermost-desktop: upgrade to the fixed version with the command below.

npm install mattermost-desktop@5.8.0

Details

Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/mattermost-desktop
Introduced in: 0Fixed in: 5.8.0
Fixnpm install mattermost-desktop@5.8.0

References