github.com/mattermost/mattermost-plugin-boards vulnerabilities (Go)

2 vulnerabilities.

• github.com/mattermost/mattermost-plugin-boards Go Missing authorization check allows unauthorized modification of other users' comments on a board CVE-2026-2461 Public exploitFix available 4.3 MediumMarch 16, 2026
• github.com/mattermost/mattermost-plugin-boards Go IDOR in board file download allows any user to download any file by UUID CVE-2025-9081 Fix available 3.1 LowSeptember 19, 2025