Skip to content
OpenAdvisories

Package · Wolfi

mattermost-11.1

72 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.5
    CVE-2026-27139

    FileInfo can escape from a Root in os

    On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by …

    Go standard library os langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Low 1.7
    CVE-2026-26958

    filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity

    filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the iden…

    FiloSottile filippo.io/edwards25519 kots aactl Debian Ubuntu Azure Linux Wolfi Go
  • Low 2.5
    CVE-2020-8912

    In-band key negotiation issue in AWS S3 Crypto SDK for GoLang

    A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorithm of an object in the bucket, which can then allow them to c…

    Google AWS S3 Crypto SDK for GoLang zot kots Wolfi Go