{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Mattermost: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/mattermost--mattermost/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/mattermost--mattermost/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-16453/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-16453/",
   "title": "CVE-2026-16453 · Mattermost · disclosed",
   "content_text": "Mattermost versions 11.10.x \u003c= 11.10.0, 11.7.x \u003c= 11.7.9, 11.9.x \u003c= 11.9.1, 11.8.x \u003c= 11.8.5 fail to verify the integrity of the SAML RelayState POST parameter which allows an authenticated SAML user to join any team, including invite-only teams, via forging the team_id or invite_id fields in the RelayState.. Mattermost Advisory ID: MMSA-2026-00727",
   "date_published": "2026-10-16T07:08:48Z"
  }
 ]
}