/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2025-35965

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-35965

Severity

7.5

High

CVSS V3

Description

Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to validate the uniqueness and quantity of task actions within the UpdateRunTaskActions GraphQL operation, which allows an attacker to create task items containing an excessive number of actions triggered by specific posts, overloading the server and leading to a denial-of-service (DoS) condition.

References

  • https://images.chainguard.dev/security/CGA-jj79-rw2c-wrgr

Affected packages


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing