github.com/mattermost/focalboard vulnerabilities (Go)

2 vulnerabilities.

• github.com/mattermost/focalboard Go Focalboard IDOR in file content endpoint allows cross-user file access (unsupported product, no fix) CVE-2026-28736 4.3 MediumApril 3, 2026
• github.com/mattermost/focalboard Go Focalboard Second-Order SQL Injection in category reorder endpoint allows data exfiltration (unsupported product, no fix) CVE-2026-25773 8.1 HighApril 3, 2026