VYPR

Boards plugin

by Mattermost

CVEs (1)

  • CVE-2026-13417MedSep 14, 2026
    risk 0.21cvss 4.3epss

    Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate the type of `fields.properties` on block creation which allows an authenticated user with editor access to a board to crash the Boards plugin worker and trigger a…