deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-3q27-7qjq-p9c5
Package: github.com/grafana/grafana (GO)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: >= 12.0.0, < 12.1.10
Patched in: unpatched

Summary: Grafana public dashboards disclose all direct mode datasources

Details:
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.

No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.
GitHub Security Advisory: GHSA-3q27-7qjq-p9c5
Package: github.com/grafana/grafana (GO)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: >= 9.3.0, < 11.6.14
Patched in: unpatched

Summary: Grafana public dashboards disclose all direct mode datasources

Details:
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.

No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.
GitHub Security Advisory: GHSA-qqrv-2hch-83q4
Package: github.com/kyverno/kyverno (GO)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 1.16.0, <= 1.17.1
Patched in: unpatched

Summary: Duplicate Advisory: Kyverno is vulnerable to server-side request forgery (SSRF)

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-rggm-jjmc-3394. This link is maintained to preserve external references.

## Original Description
Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.
GitHub Security Advisory: GHSA-prxj-3gcv-cqrh
Package: github.com/teslamotors/fleet-telemetry (GO)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-295: Improper Certificate Validation
Vulnerable versions: <= 0.8.0
Patched in: 0.9.0

Summary: Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials

Details:
### Summary
A vulnerability in vehicle authentication allows  threat actor with valid client credentials (i.e., a private key and certificate from a rooted infotainment system) to impersonate arbitrary VINs when authenticating to the telemetry server.

### Impact
The attacker would be able to submit falsified telemetry records for arbitrary VINs.
GitHub Security Advisory: GHSA-xw45-cc32-442f
Package: github.com/ellanetworks/core (GO)
Severity: LOW (CVSS 2.7)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: <= 1.7.0
Patched in: 1.8.0

Summary: Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber

Details:
## Summary

The `PUT /api/v1/subscriber/{imsi}` API accepts an IMSI identifier from both the URL path and the JSON request body but never verifies they match. This allows an authenticated NetworkManager to modify any subscriber's policy while the audit trail records a fabricated or unrelated subscriber IMSI.

## Impact

A NetworkManager or Admin can modify any subscriber's QoS policy (potentially degrading service or altering traffic routing) while the audit log attributes the change to a non-existent or unrelated subscriber. Post-incident forensic searches for the affected subscriber's IMSI would find no matching audit entries.

## Fix

Remove the IMSI as a body param and use the path param as a single source of truth.
GitHub Security Advisory: GHSA-6gm8-3g4h-w82m
Package: github.com/ellanetworks/core (GO)
Severity: MODERATE (CVSS 5.8)
CWE: CWE-476: NULL Pointer Dereference
Vulnerable versions: <= 1.7.0
Patched in: 1.8.0

Summary: Ella Core Panics Upon NGAP handover failure

Details:
## Summary

Ella Core panics when processing a NGAP handover failure message.

## Impact

If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers.

## Fix 

Improve guards in NGAP handover handlers.
GitHub Security Advisory: GHSA-xw59-hvm2-8pj6
Package: github.com/modelcontextprotocol/go-sdk (GO)
Severity: HIGH (CVSS 8.1)
CWE: CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: < 1.4.0
Patched in: 1.4.0

Summary: DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost

Details:
The Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication with `StreamableHTTPHandler` or `SSEHandler`, a malicious website could exploit DNS rebinding to bypass same-origin policy restrictions and send requests to the local MCP server. This could allow an attacker to invoke tools or access resources exposed by the MCP server on behalf of the user in those limited circumstances.

Note that running HTTP-based MCP servers locally without authentication is not recommended per MCP security best practices. This issue does not affect servers using stdio transport.

Servers created via `StreamableHTTPHandler` or `SSEHandler` now have this protection enabled by default when binding to `localhost`. Users are advised to update to version `1.4.0` to receive this automatic protection.
GitHub Security Advisory: GHSA-mpc7-mm28-f6wq
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 8.0.0[PII_REDACTED]0200-d27a2195068d, < 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b
Patched in: 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b

Summary: Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which allows authenticated guest users to enumerate user IDs outside their allowed visibility scope via the group retrieval endpoint. Mattermost Advisory ID: MMSA-2026-00594.
GitHub Security Advisory: GHSA-mpc7-mm28-f6wq
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 10.11.0-rc1, < 10.11.11
Patched in: 10.11.11

Summary: Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which allows authenticated guest users to enumerate user IDs outside their allowed visibility scope via the group retrieval endpoint. Mattermost Advisory ID: MMSA-2026-00594.
GitHub Security Advisory: GHSA-mpc7-mm28-f6wq
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 11.2.0-rc1, < 11.2.3
Patched in: 11.2.3

Summary: Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which allows authenticated guest users to enumerate user IDs outside their allowed visibility scope via the group retrieval endpoint. Mattermost Advisory ID: MMSA-2026-00594.
GitHub Security Advisory: GHSA-mpc7-mm28-f6wq
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 11.3.0-rc1, < 11.3.2
Patched in: 11.3.2

Summary: Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which allows authenticated guest users to enumerate user IDs outside their allowed visibility scope via the group retrieval endpoint. Mattermost Advisory ID: MMSA-2026-00594.
GitHub Security Advisory: GHSA-mpc7-mm28-f6wq
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 11.4.0
Patched in: 11.4.1

Summary: Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which allows authenticated guest users to enumerate user IDs outside their allowed visibility scope via the group retrieval endpoint. Mattermost Advisory ID: MMSA-2026-00594.
GitHub Security Advisory: GHSA-vhgh-g7x8-4rx8
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
Vulnerable versions: >= 8.0.0[PII_REDACTED]0200-d27a2195068d, < 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b
Patched in: 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b

Summary: Mattermost doesn't validate decompressed archive entry sizes during file extraction

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly compressed entries (zip bombs) that exhaust server memory. Mattermost Advisory ID: MMSA-2026-00598.
GitHub Security Advisory: GHSA-vhgh-g7x8-4rx8
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
Vulnerable versions: >= 10.11.0, < 10.11.12
Patched in: 10.11.12

Summary: Mattermost doesn't validate decompressed archive entry sizes during file extraction

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly compressed entries (zip bombs) that exhaust server memory. Mattermost Advisory ID: MMSA-2026-00598.
GitHub Security Advisory: GHSA-vhgh-g7x8-4rx8
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
Vulnerable versions: >= 11.2.0, < 11.2.4
Patched in: 11.2.4

Summary: Mattermost doesn't validate decompressed archive entry sizes during file extraction

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly compressed entries (zip bombs) that exhaust server memory. Mattermost Advisory ID: MMSA-2026-00598.
GitHub Security Advisory: GHSA-vhgh-g7x8-4rx8
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
Vulnerable versions: >= 11.3.0, < 11.3.2
Patched in: 11.3.2

Summary: Mattermost doesn't validate decompressed archive entry sizes during file extraction

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly compressed entries (zip bombs) that exhaust server memory. Mattermost Advisory ID: MMSA-2026-00598.
GitHub Security Advisory: GHSA-vhgh-g7x8-4rx8
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
Vulnerable versions: = 11.4.0
Patched in: 11.4.1

Summary: Mattermost doesn't validate decompressed archive entry sizes during file extraction

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly compressed entries (zip bombs) that exhaust server memory. Mattermost Advisory ID: MMSA-2026-00598.
GitHub Security Advisory: GHSA-4765-v66x-rqx7
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 5.0)
CWE: CWE-732: Incorrect Permission Assignment for Critical Resource
Vulnerable versions: >= 8.0.0[PII_REDACTED]0200-d27a2195068d, < 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b
Patched in: 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b

Summary: Mattermost doesn't set permissions on downloaded bulk export

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other local users on the server to be able to read contents of the bulk export. Mattermost Advisory ID: MMSA-2026-00593.
GitHub Security Advisory: GHSA-4765-v66x-rqx7
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 5.0)
CWE: CWE-732: Incorrect Permission Assignment for Critical Resource
Vulnerable versions: >= 10.11.0-rc1, < 10.11.12
Patched in: 10.11.12

Summary: Mattermost doesn't set permissions on downloaded bulk export

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other local users on the server to be able to read contents of the bulk export. Mattermost Advisory ID: MMSA-2026-00593.
GitHub Security Advisory: GHSA-4765-v66x-rqx7
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 5.0)
CWE: CWE-732: Incorrect Permission Assignment for Critical Resource
Vulnerable versions: >= 11.2.0-rc1, < 11.2.4
Patched in: 11.2.4

Summary: Mattermost doesn't set permissions on downloaded bulk export

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other local users on the server to be able to read contents of the bulk export. Mattermost Advisory ID: MMSA-2026-00593.
GitHub Security Advisory: GHSA-4765-v66x-rqx7
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 5.0)
CWE: CWE-732: Incorrect Permission Assignment for Critical Resource
Vulnerable versions: >= 11.3.0-rc1, < 11.3.2
Patched in: 11.3.2

Summary: Mattermost doesn't set permissions on downloaded bulk export

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other local users on the server to be able to read contents of the bulk export. Mattermost Advisory ID: MMSA-2026-00593.
GitHub Security Advisory: GHSA-4765-v66x-rqx7
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 5.0)
CWE: CWE-732: Incorrect Permission Assignment for Critical Resource
Vulnerable versions: >= 11.4.0-rc1, < 11.4.1
Patched in: 11.4.1

Summary: Mattermost doesn't set permissions on downloaded bulk export

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other local users on the server to be able to read contents of the bulk export. Mattermost Advisory ID: MMSA-2026-00593.
GitHub Security Advisory: GHSA-3mw5-466q-295q
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.8)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 8.0.0[PII_REDACTED]0200-d27a2195068d, < 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b
Patched in: 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b

Summary: Mattermost allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration in support packet generation. Mattermost Advisory ID: MMSA-2025-00562.
GitHub Security Advisory: GHSA-3mw5-466q-295q
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.8)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 10.11.0-rc1, < 10.11.12
Patched in: 10.11.12

Summary: Mattermost allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration in support packet generation. Mattermost Advisory ID: MMSA-2025-00562.
GitHub Security Advisory: GHSA-3mw5-466q-295q
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.8)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 11.2.0-rc1, < 11.2.4
Patched in: 11.2.4

Summary: Mattermost allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration in support packet generation. Mattermost Advisory ID: MMSA-2025-00562.
GitHub Security Advisory: GHSA-3mw5-466q-295q
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.8)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 11.3.0-rc1, < 11.3.2
Patched in: 11.3.2

Summary: Mattermost allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration in support packet generation. Mattermost Advisory ID: MMSA-2025-00562.
GitHub Security Advisory: GHSA-3mw5-466q-295q
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 6.8)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 11.4.0-rc1, < 11.4.1
Patched in: 11.4.1

Summary: Mattermost allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration

Details:
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration in support packet generation. Mattermost Advisory ID: MMSA-2025-00562.
GitHub Security Advisory: GHSA-3439-vqgj-2gcf
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: HIGH (CVSS 8.0)
CWE: CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
Vulnerable versions: >= 8.0.0[PII_REDACTED]0200-d27a2195068d, < 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b
Patched in: 8.0.0[PII_REDACTED]0922-b7d4a1f1f59b

Summary: Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences that enable screen manipulation, fake prompts, and clipboard hijacking. Mattermost Advisory ID: MMSA-2026-00599.
GitHub Security Advisory: GHSA-3439-vqgj-2gcf
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: HIGH (CVSS 8.0)
CWE: CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
Vulnerable versions: >= 10.11.0-rc1, < 10.11.11
Patched in: 10.11.11

Summary: Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences that enable screen manipulation, fake prompts, and clipboard hijacking. Mattermost Advisory ID: MMSA-2026-00599.
GitHub Security Advisory: GHSA-3439-vqgj-2gcf
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: HIGH (CVSS 8.0)
CWE: CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
Vulnerable versions: >= 11.2.0-rc1, < 11.2.3
Patched in: 11.2.3

Summary: Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences that enable screen manipulation, fake prompts, and clipboard hijacking. Mattermost Advisory ID: MMSA-2026-00599.
GitHub Security Advisory: GHSA-3439-vqgj-2gcf
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: HIGH (CVSS 8.0)
CWE: CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
Vulnerable versions: >= 11.3.0-rc1, < 11.3.2
Patched in: 11.3.2

Summary: Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences that enable screen manipulation, fake prompts, and clipboard hijacking. Mattermost Advisory ID: MMSA-2026-00599.
GitHub Security Advisory: GHSA-3439-vqgj-2gcf
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: HIGH (CVSS 8.0)
CWE: CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences
Vulnerable versions: >= 11.4.0-rc1, < 11.4.1
Patched in: 11.4.1

Summary: Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences

Details:
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences that enable screen manipulation, fake prompts, and clipboard hijacking. Mattermost Advisory ID: MMSA-2026-00599.