Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-55070

Fixed in a distro release EPSS <1%CVSS 6.5

Mattermost versions <11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users to access sensitive information via WebSocket events

Published 2025-11-14 · CVE record · OSV

Products: Mattermost

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/mattermost/mattermost-server11.1.0
Gogithub.com/mattermost/mattermost-server11.1.0+incompatible
Gogithub.com/mattermost/mattermost-server/v5no fix
Gogithub.com/mattermost/mattermost-server/v6no fix
Gogithub.com/mattermost/mattermost/server/v88.0.0-20250912063506-7d8b7b5e4a60

Distro releases

ReleasePackageFixed in
openSUSE Leap 16.0govulncheck-vulndb0.0.20260723T184607-160000.1.1