7.5
CVSS CVSS_V3
Status
Justification
Impact
This vulnerability relates to v8.1.x of mattermost, which is several releases old. The componentVersion is also being flagged incorrectly here by some scanners. A bug has been filed upstream against Syft, and the maintainers have confirmed it's a scanner issue. See: https://github.com/anchore/syft/issues/2980.