CGA-xcv6-ch8v-3m93

The fix for this CVE, which was introduced in mattermost v10.5.4, includes functional changes that are not able to be backported to mattermost v10.4.x. This version stream of mattermost is end of life (EOL) as of 16 Jan 2025, Chainguard strongly recommends upgrading to the newest version stream; v10.8.x.

Unable to use govulncheck to triage this advisory because the vulnerability was not found in the Go vuln DB. Treating as a true positive since we can't confirm this is a false positive.