| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | ≥ 10.11.0, < 10.11.9≥ 10.11.0+incompatible, < 10.11.9+incompatible≥ 11.0.0, < 11.0.7≥ 11.0.1+incompatible, < 11.0.7+incompatible≥ 11.1.0, < 11.1.2≥ 11.1.0+incompatible, < 11.1.2+incompatible | 10.11.910.11.9+incompatible11.0.711.0.7+incompatible11.1.211.1.2+incompatible |
| mattermost server | ≥ 10.11.0, < 10.11.9≥ 11.0.0, < 11.0.7≥ 11.1.0, < 11.1.2 | 10.11.911.0.711.1.2 |
Mattermost versions 10.11.x <= 10.11.8, 11.1.x <= 11.1.1, 11.0.x <= 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free