Webapp DoS via malicious retrospective post in Playbooks

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2025-41395 · CVE overview and exploitation status

EUVD-2025-12104

GHSA-3g36-gf7c-75qw

GO-2025-3642

cve-program · CVE-2025-41395

• https://mattermost.com/security-updates

euvd · EUVD-2025-12104

• https://mattermost.com/security-updates

nvd · CVE-2025-41395

• https://mattermost.com/security-updates

osv · GHSA-3g36-gf7c-75qw

• https://nvd.nist.gov/vuln/detail/CVE-2025-41395
• https://github.com/mattermost/mattermost-plugin-playbooks/commit/4c823090e281cb9c0d5c17ee2e5db275117540d1
• https://github.com/mattermost/mattermost/commit/2b5275d87136f07e016c8eca09a2f004b31afc8a
• https://github.com/mattermost/mattermost-plugin-playbooks
• https://mattermost.com/security-updates

osv · GO-2025-3642

• https://github.com/advisories/GHSA-3g36-gf7c-75qw
• https://nvd.nist.gov/vuln/detail/CVE-2025-41395
• https://github.com/mattermost/mattermost-plugin-playbooks/commit/4c823090e281cb9c0d5c17ee2e5db275117540d1
• https://github.com/mattermost/mattermost/commit/2b5275d87136f07e016c8eca09a2f004b31afc8a
• https://mattermost.com/security-updates

No related changes are available here.