Launch Week Day 1: Announcing Security Design Review
Start for Free
go

github.com/mattermost/mattermost-plugin-playbooks

View on go registry
10 Total advisories
10 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 4.3
Go

CVE-2026-6343

Mattermost doesn't check public/private permissions
LOW 3.1
Go

CVE-2026-4286

Mattermost doesn't check if {{team_id}} was being changed when updating playbooks
LOW 3.1
Go

CVE-2025-41423

Mattermost Playbooks fails to properly validate permissions
MEDIUM 6.5
Go

CVE-2025-35965

Mattermost Playbooks fails to validate the uniqueness and quantity of task actions
MEDIUM 6.5
Go

CVE-2025-41395

Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type
MEDIUM 4.3
Go

CVE-2026-26304

Mattermost fails to verify run_create permission for empty playbookId
UNKNOWN
Go

CVE-2026-26304

Mattermost fails to verify run_create permission for empty playbookId in github.com/mattermost/mattermost-plugin-playbooks
UNKNOWN
Go

CVE-2025-41423

Mattermost Playbooks fails to properly validate permissions in github.com/mattermost/mattermost-plugin-playbooks
UNKNOWN
Go

CVE-2025-35965

Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks
UNKNOWN
Go

CVE-2025-41395

Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type in github.com/mattermost/mattermost-plugin-playbooks

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes