https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T16:13:36.620269+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-159497 EUVD-2026-159497 2026-10-15T16:13:36.622300+00:00 EUVD-2026-159497 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32939 fkie_cve-2024-32939 2026-10-15T16:13:36.622328+00:00

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2, when shared channels are enabled, fail to redact remote users' original email addresses stored in user props when email addresses are otherwise configured not to be visible in the local server."

 https://cve.radiocsirt.org/vuln/ghsa-4ww8-fprq-cq34 GHSA-4ww8-fprq-cq34 — Mattermost doesn't redact remote users' original email addresses 2026-10-15T16:13:36.622358+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2, when shared channels are enabled, fail to redact remote users' original email addresses stored in user props when email addresses are otherwise configured not to be visible in the local server.