https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:46:21.999196+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319080 EUVD-2026-319080 2026-10-04T23:46:22.046840+00:00 EUVD-2026-319080 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4054 fkie_cve-2026-4054 2026-10-04T23:46:22.046875+00:00

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header (e.g. image/png) embedded in an og:image meta tag or Markdown image link.. Mattermost Advisory ID: MMSA-2026-00630

 https://cve.radiocsirt.org/vuln/ghsa-j76w-p754-g2w7 GHSA-j76w-p754-g2w7 — Mattermost doesn't validate the response body of proxied images 2026-10-04T23:46:22.046910+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG file served from an attacker-controlled origin under a non-SVG Content-Type header (e.g. image/png) embedded in an og:image meta tag or Markdown image link. Mattermost Advisory ID: MMSA-2026-00630.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1154 WID-SEC-W-2026-1154 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T23:46:22.046938+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.