alimursaliyev

Mattermost server missing request body size limit on plugin routes allows denial of service by an authenticated user

MS Calendar plugin: unrecovered handler panics from malformed post-action requests could crash the plugin process

Uploading a crafted image causes excessive memory allocation in the Mattermost Server

Missing property field ownership validation in Playbooks run property update endpoint

Boards plugin denial of service via unvalidated block fields.properties

Boards plugin panics on WebSocket command with non-string field types

Deactivated guest accounts can authenticate via magic-link token in Mattermost REST API login endpoint