https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 11:04:22 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1190 certfr-2026-avi-1190 https://db.gcve.eu/vuln/certfr-2026-avi-1190 https://db.gcve.eu/vuln/fkie_cve-2026-91181 <p>Mattermost versions 11.9.x &lt;= 11.9.0, 11.8.x &lt;= 11.8.4, 11.7.x &lt;= 11.7.7, 10.11.x &lt;= 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team&#39;s secret invite_id and email, and use it to join the team without authorization, via GET /api/v4/data_retention/policies/{policy_id}/teams.. Mattermost Advisory ID: MMSA-2026-00702</p> <p>Mattermost versions 11.9.x &lt;= 11.9.0, 11.8.x &lt;= 11.8.4, 11.7.x &lt;= 11.7.7, 10.11.x &lt;= 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team&#39;s secret invite_id and email, and use it to join the team without authorization, via GET /api/v4/data_retention/policies/{policy_id}/teams.. Mattermost Advisory ID: MMSA-2026-00702</p> https://db.gcve.eu/vuln/fkie_cve-2026-91181 https://db.gcve.eu/vuln/ghsa-w86c-vmwh-pppx <p>Mattermost versions 11.9.x &lt;= 11.9.0, 11.8.x &lt;= 11.8.4, 11.7.x &lt;= 11.7.7, 10.11.x &lt;= 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team&#39;s secret invite_id and email, and use it to join the team without authorization, via GET /api/v4/data_retention/policies/{policy_id}/teams.. Mattermost Advisory ID: MMSA-2026-00702</p> <p>Mattermost versions 11.9.x &lt;= 11.9.0, 11.8.x &lt;= 11.8.4, 11.7.x &lt;= 11.7.7, 10.11.x &lt;= 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team&#39;s secret invite_id and email, and use it to join the team without authorization, via GET /api/v4/data_retention/policies/{policy_id}/teams.. Mattermost Advisory ID: MMSA-2026-00702</p> https://db.gcve.eu/vuln/ghsa-w86c-vmwh-pppx