/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-vg2c-398g-2fc6

Published

Last updated

https://images.chainguard.dev/security/CGA-vg2c-398g-2fc6
Package

mattermost-10.4

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2025-3611
  • GHSA-86jg-35xj-3vv5

Severity

4.3

Medium

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-3611

Updates

Status

Fix not planned

Impact

The fix for this CVE, which was introduced in mattermost v10.5.4, includes functional changes that are not able to be backported to mattermost v10.4.x. This version stream of mattermost is end of life (EOL) as of 16 Jan 2025, Chainguard strongly recommends upgrading to the newest version stream; v10.8.x.

Status

Affected

Impact

Unable to use govulncheck to triage this advisory because the vulnerability was not found in the Go vuln DB. Treating as a true positive since we can't confirm this is a false positive.

Status

Under investigation


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing