GHSA-qg5g-gv98-5ffh: rustls network-reachable panic in `Acceptor::accept`

GHSA-rjjv-87mx-6x3h: @sveltejs/kit vulnerable to on dev mode 404 page

GHSA-mh2x-fcqh-fmqv: @sveltejs/kit has unescaped error message included on error page

GHSA-5xr6-xhww-33m4: Artifact poisoning vulnerability in action-download-artifact v5 and earlier

GHSA-7f6p-phw2-8253: Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client.



**Mattermost Cross-site Scripting vulnerability**

Low severity GitHub Reviewed Published Dec 29, 2023 to the GitHub Advisory Database • Updated Jan 3, 2024

Headline

GHSA-h3gq-j7p9-x3p4: Mattermost Cross-site Scripting vulnerability

ghsa: Latest News