Start for Free
go

github.com/mattermost/mattermost-plugin-github

View on go registry
8 Total advisories
8 Vulnerabilities
0 Malware

Vulnerabilities

HIGH 7.5
Go

CVE-2026-5308

Mattermost doesn't enforce request body size limits on plugin HTTP endpoints
MEDIUM 4.3
Go

CVE-2026-4646

Mattermost doesn't validate user-supplied input in API request handlers
MEDIUM 5.4
Go

CVE-2026-28735

Mattermost allows authenticated users to gain access to private repositories
UNKNOWN
Go

CVE-2026-28735

Mattermost allows authenticated users to gain access to private repositories in github.com/mattermost/mattermost-plugin-github
UNKNOWN
Go

CVE-2026-4646

Mattermost doesn't validate user-supplied input in API request handlers in github.com/mattermost/mattermost-plugin-github
UNKNOWN
Go

CVE-2026-5308

Mattermost doesn't enforce request body size limits on plugin HTTP endpoints in github.com/mattermost/mattermost-plugin-github
UNKNOWN
Go

CVE-2025-13352

Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection in github.com/mattermost/mattermost
LOW 3.0
Go

CVE-2025-13352

Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes