CGA-9h3v-p757-v4c6

This vulnerability was fixed in mattermost v9.11.6. The componentVersion is being flagged incorrectly here by some scanners. A bug has been filed upstream against Syft, and the maintainers have confirmed it's a scanner issue:

• https://github.com/anchore/syft/issues/2980 It should also be noted, the GH Advisory DB currently lists the wrong fix version, at the time of writing. The mattermost security-updates feed, correctly lists v9.11.6 as the fixed version.
• https://mattermost.com/security-updates/