github.com/mattermost/mattermost-plugin-playbooks vulnerabilities (Go)

6 vulnerabilities.

• github.com/mattermost/mattermost-plugin-playbooks Go Mattermost Playbooks Plugin fails to enforce view permissions in list endpoints, allowing unauthorized access to public playbooks CVE-2026-6343 Fix available 4.3 MediumMay 18, 2026
• github.com/mattermost/mattermost-plugin-playbooks Go Playbooks Plugin fails to validate team transfers, allowing unauthorized removal of member access via playbook update CVE-2026-4286 Fix available 3.1 LowMay 18, 2026
• github.com/mattermost/mattermost-plugin-playbooks Go Permission Bypass in Playbook Run Creation CVE-2026-26304 Fix available 4.3 MediumMarch 16, 2026
• github.com/mattermost/mattermost-plugin-playbooks Go Unauthorized Playbooks Post Deletion in Mattermost Playbooks Plugin CVE-2025-41423 Fix available 3.1 LowApril 24, 2025
• github.com/mattermost/mattermost-plugin-playbooks Go DoS in Mattermost Playbooks via Excessive Task Actions CVE-2025-35965 Fix available 6.5 MediumApril 24, 2025
• github.com/mattermost/mattermost-plugin-playbooks Go Webapp DoS via malicious retrospective post in Playbooks CVE-2025-41395 Fix available 6.5 MediumApril 24, 2025