Advisories · Weakness
CWE-1426.
Every Advisory and CVE whose sources give the weakness CWE-1426, newest first.
- CVSS 3.0 Low
Mattermost allows other users to determine when users had read channels via channel member objects in github.com/mattermost/mattermost-server
- CWE-1426
>=10.5.0+incompatible, <10.5.12+incompatible || >=10.11.0+incompatible, <10.11.4+incompatible · fixed in 10.5.12+incompatible, 10.11.4+incompatible
GHSA-9hh7-6558-qfp2 · CVE-2025-55074 - CVSS 5.0 Medium
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-693
- CWE-1426
- CVSS 3.0 Low
Mattermost doesn't restrict domains LLM can request to contact upstream
- Information disclosure
- CWE-1426
<8.0.0-20250218121836-2b5275d87136 || >=9.11.0, <9.11.10 || >=10.4.0, <10.4.3 || >=10.5.0, <10.5.1 · fixed in 8.0.0-20250218121836-2b5275d87136, 9.11.10, 10.4.3, 10.5.1
GHSA-9h6j-4ffx-cm84 · CVE-2025-31363