Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:08:12 +0000 bdu:2025-16347 https://cve.radiocsirt.org/vuln/bdu:2025-16347 bdu:2025-16347 https://cve.radiocsirt.org/vuln/bdu:2025-16347 EUVD-2026-263859 https://cve.radiocsirt.org/vuln/euvd-2026-263859 EUVD-2026-263859 https://cve.radiocsirt.org/vuln/euvd-2026-263859 fkie_cve-2025-13352 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13352 <p>Mattermost versions 10.11.x &lt;= 10.11.6 and Mattermost GitHub plugin versions &lt;=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts.</p> <p>Mattermost versions 10.11.x &lt;= 10.11.6 and Mattermost GitHub plugin versions &lt;=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13352 GHSA-jf5h-xfw4-p8gp — Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection https://cve.radiocsirt.org/vuln/ghsa-jf5h-xfw4-p8gp <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost, Go: github.com/mattermost/mattermost-plugin-github</p> <p>Mattermost versions 10.11.x &lt;= 10.11.6 and Mattermost GitHub plugin versions &lt;=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts.</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost, Go: github.com/mattermost/mattermost-plugin-github</p> <p>Mattermost versions 10.11.x &lt;= 10.11.6 and Mattermost GitHub plugin versions &lt;=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts.</p> https://cve.radiocsirt.org/vuln/ghsa-jf5h-xfw4-p8gp