Threats affecting pkg:golang/github.com/mattermost/mattermost/server/public

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2026-13426github.com/mattermost/mattermost/server/public · Path Traversal Medium5.4EPSS 0.3%2026-06-26CVE Database V5CVE-2026-13426 The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail to validate path parameters when constructing API route paths which allows an attacker to redirect API calls to unintended endpoints via crafted IDs containing path traversal components. Mattermost Advisory ID: MMSA-2025-00532 EPSS 0.3%Vulnerability CWE-22	CVE Database V5	2026-06-26

Page 1 of 1 · 1 duplicate CVE record merged