https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:04:56 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-01688 cnvd-2025-01688 https://cve.radiocsirt.org/vuln/cnvd-2025-01688 https://cve.radiocsirt.org/vuln/euvd-2026-188498 EUVD-2026-188498 https://cve.radiocsirt.org/vuln/euvd-2026-188498 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47003 <p>Mattermost versions 9.11.x &lt;= 9.11.0 and 9.5.x &lt;= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a permalink post and crash the frontend.</p> <p>Mattermost versions 9.11.x &lt;= 9.11.0 and 9.5.x &lt;= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a permalink post and crash the frontend.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47003 https://cve.radiocsirt.org/vuln/ghsa-59hf-mpf8-pqjh <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8</p> <p>Mattermost does not strip `embeds` from `metadata` when broadcasting `posted` events.</p> <p>This allows users to include arbitrary embeds in posts, which are then broadcasted via websockets. This can be exploited in many ways, for example to create permalinks with fully customizable content or to trigger a client Side Denial of Service (DoS) by sending a permalink with a non-string message.</p> <p>The advisory metadata references the appropriate go pseudo version available from pkg.go.dev</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8</p> <p>Mattermost does not strip `embeds` from `metadata` when broadcasting `posted` events.</p> <p>This allows users to include arbitrary embeds in posts, which are then broadcasted via websockets. This can be exploited in many ways, for example to create permalinks with fully customizable content or to trigger a client Side Denial of Service (DoS) by sending a permalink with a non-string message.</p> <p>The advisory metadata references the appropriate go pseudo version available from pkg.go.dev</p> https://cve.radiocsirt.org/vuln/ghsa-59hf-mpf8-pqjh https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 https://cve.radiocsirt.org/vuln/suse-su-2024:3911-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3911-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1957 <p>Ein Angreifer kann mehrere Schwachstellen im Mattermost Server ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Mattermost Server ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1957