Skip to content
OpenAdvisories

Package · Go

github.com/mattermost/mattermost-plugin-msteams

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-24661

    Unbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook Endpoint

    Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory I…

    Mattermost Mattermost github.com/mattermost/mattermost-plugin-msteams Go
  • Low 3.7
    CVE-2026-21388

    Unbounded Request Body Read in MS Teams Plugin {{/lifecycle}} Webhook Endpoint

    Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory I…

    Mattermost Mattermost github.com/mattermost/mattermost-plugin-msteams Go