github.com/mattermost/mattermost-plugin-playbooks (Go)
Advisories
16
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.41.1-0.20260309184833-887d9cacb616 or later clears every advisory below that has a fix.
Upgrade commands
go
go get github.com/mattermost/mattermost-plugin-playbooks@v1.41.1-0.20260309184833-887d9cacb616 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GO-2026-5494 Mattermost doesn't check public/private permissions |
Medium EPSS 0.17% |
< 1.41.1-0.20260309184833-887d9cacb616 | 1.41.1-0.20260309184833-887d9cacb616 |
| GO-2026-5494 Mattermost doesn't check public/private permissions |
Medium EPSS 0.17% |
< 1.41.1-0.20260309184833-887d9cacb616 | 1.41.1-0.20260309184833-887d9cacb616 |
| GO-2026-5404 Mattermost doesn't check if {{team_id}} was being changed when updating playbooks |
Medium EPSS 0.14% |
< 1.41.1-0.20260213020129-e1d6ec2c94e6 | 1.41.1-0.20260213020129-e1d6ec2c94e6 |
| GO-2026-5404 Mattermost doesn't check if {{team_id}} was being changed when updating playbooks |
Medium EPSS 0.14% |
< 1.41.1-0.20260213020129-e1d6ec2c94e6 | 1.41.1-0.20260213020129-e1d6ec2c94e6 |
| GO-2025-3644 Mattermost Playbooks fails to properly validate permissions |
Medium EPSS 0.28% |
>= 2.0.0 | No fix yet |
| GO-2025-3644 Mattermost Playbooks fails to properly validate permissions |
Medium EPSS 0.28% |
< 1.41.0 | 1.41.0 |
| GO-2025-3644 Mattermost Playbooks fails to properly validate permissions |
Medium EPSS 0.28% |
all versions | No fix yet |
| GO-2025-3644 Mattermost Playbooks fails to properly validate permissions |
Medium EPSS 0.28% |
< 1.41.0 | 1.41.0 |
| GO-2025-3642 Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type |
High EPSS 0.50% |
>= 2.0.0 | No fix yet |
| GO-2025-3642 Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type |
High EPSS 0.50% |
< 1.41.0 | 1.41.0 |
| GO-2025-3642 Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type |
High EPSS 0.50% |
all versions | No fix yet |
| GO-2025-3642 Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type |
High EPSS 0.50% |
< 1.41.0 | 1.41.0 |
| GO-2025-3643 Mattermost Playbooks fails to validate the uniqueness and quantity of task actions |
High EPSS 0.40% |
>= 2.0.0 | No fix yet |
| GO-2025-3643 Mattermost Playbooks fails to validate the uniqueness and quantity of task actions |
High EPSS 0.40% |
< 1.41.0 | 1.41.0 |
| GO-2025-3643 Mattermost Playbooks fails to validate the uniqueness and quantity of task actions |
High EPSS 0.40% |
all versions | No fix yet |
| GO-2025-3643 Mattermost Playbooks fails to validate the uniqueness and quantity of task actions |
High EPSS 0.40% |
< 1.41.0 | 1.41.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor