DoS in Mattermost Playbooks via Excessive Task Actions

@@ -141,7 +141,7 @@ PLUGIN_PACKAGES += mattermost-plugin-gitlab-v1.9.1
 PLUGIN_PACKAGES += mattermost-plugin-jira-v4.2.0
 # We need to prepackage both versions of playbooks and install the correct one based on the server license. See MM-60025.
 PLUGIN_PACKAGES += mattermost-plugin-playbooks-v1.40.0
-PLUGIN_PACKAGES += mattermost-plugin-playbooks-v2.0.1
+PLUGIN_PACKAGES += mattermost-plugin-playbooks-v2.1.1
 PLUGIN_PACKAGES += mattermost-plugin-nps-v1.3.3
 PLUGIN_PACKAGES += mattermost-plugin-servicenow-v2.3.4
 PLUGIN_PACKAGES += mattermost-plugin-zoom-v1.8.0

@@ -531,6 +531,10 @@ func validateUpdateTaskActions(checklists []UpdateChecklist) error {
 	for _, checklist := range checklists {
 		for _, item := range checklist.Items {
 			if taskActions := item.TaskActions; taskActions != nil {
+				// Limit task actions to 10
+				if len(*taskActions) > 10 {
+					return errors.Errorf("playbook cannot have more than 10 task actions")
+				}
 				for _, ta := range *taskActions {
 					if err := app.ValidateTrigger(ta.Trigger); err != nil {
 						return err

@@ -264,6 +264,11 @@ func validatePreAssignment(pb app.Playbook) error {
 // validateTaskActions validates the taskactions in the given checklist
 // NOTE: Any changes to this function must be made to function 'validateUpdateTaskActions' for the GraphQL endpoint.
 func validateTaskActions(taskActions []app.TaskAction) error {
+	// Limit task actions to 10
+	if len(taskActions) > 10 {
+		return errors.Errorf("playbook cannot have more than 10 task actions")
+	}
+
 	for _, ta := range taskActions {
 		if err := app.ValidateTrigger(ta.Trigger); err != nil {
 			return err