https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:08:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-07821 bdu:2025-07821 https://cve.radiocsirt.org/vuln/bdu:2025-07821 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0453 certfr-2025-avi-0453 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0453 https://cve.radiocsirt.org/vuln/cnvd-2025-15822 cnvd-2025-15822 https://cve.radiocsirt.org/vuln/cnvd-2025-15822 https://cve.radiocsirt.org/vuln/euvd-2026-246210 EUVD-2026-246210 https://cve.radiocsirt.org/vuln/euvd-2026-246210 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47871 <p>Mattermost versions 10.5.x &lt;= 10.5.5, 9.11.x &lt;= 9.11.15, 10.8.x &lt;= 10.8.0, 10.7.x &lt;= 10.7.2, 10.6.x &lt;= 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive information about linked private channels including channel name, display name, and participant count through the run metadata API endpoint.</p> <p>Mattermost versions 10.5.x &lt;= 10.5.5, 9.11.x &lt;= 9.11.15, 10.8.x &lt;= 10.8.0, 10.7.x &lt;= 10.7.2, 10.6.x &lt;= 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive information about linked private channels including channel name, display name, and participant count through the run metadata API endpoint.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-47871 https://cve.radiocsirt.org/vuln/ghsa-wgvp-jj4w-88hf <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8</p> <p>Mattermost versions 10.5.x &lt;= 10.5.5, 9.11.x &lt;= 9.11.15, 10.8.x &lt;= 10.8.0, 10.7.x &lt;= 10.7.2, 10.6.x &lt;= 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive information about linked private channels including channel name, display name, and participant count through the run metadata API endpoint.</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8</p> <p>Mattermost versions 10.5.x &lt;= 10.5.5, 9.11.x &lt;= 9.11.15, 10.8.x &lt;= 10.8.0, 10.7.x &lt;= 10.7.2, 10.6.x &lt;= 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive information about linked private channels including channel name, display name, and participant count through the run metadata API endpoint.</p> https://cve.radiocsirt.org/vuln/ghsa-wgvp-jj4w-88hf https://cve.radiocsirt.org/vuln/opensuse-su-2025:15405-1 <p>govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15405-1