/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-3cjr-6ggf-57v6

Published

Last updated

https://images.chainguard.dev/security/CGA-3cjr-6ggf-57v6
Package

mattermost-10.2

RepositoryWolfi
Latest Update
Under investigation
Aliases
  • CVE-2025-21088
  • GHSA-8j3q-gc9x-7972

Severity

Unknown

Summary

Mattermost Incorrect Type Conversion or Cast

Description

Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the frontend via crafted malicious input.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs