GHSA-pfr9-2p92-qrhq: Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function

GHSA-jqfv-jrvq-95jm: Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability

GHSA-9722-9j67-vjcr: Improper Authorization in Select Permissions

GHSA-qjrv-v6qp-x99x: SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings

GHSA-f3cx-396f-7jqp: Livewire Remote Code Execution on File Uploads

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client.



**Mattermost Cross-site Scripting vulnerability**

Low severity GitHub Reviewed Published Dec 29, 2023 to the GitHub Advisory Database • Updated Jan 3, 2024

Headline

GHSA-h3gq-j7p9-x3p4: Mattermost Cross-site Scripting vulnerability

ghsa: Latest News