VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/mattermost/mattermost-plugin-playbooks: vulnerability history, versions and safety

github.com/mattermost/mattermost-plugin-playbooks is a package in the Go ecosystem. Vulert records 9 vulnerabilities for it across 120 releases, from Apr 2025 to Jun 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
9 vulnerabilities recorded M2 L1 U6
i
5 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
4 in the last 12 months

Most recent disclosure 25 Jun 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/mattermost/mattermost-plugin-playbooks vulnerabilities

Vulert verdict on github.com/mattermost/mattermost-plugin-playbooks v1.41.1 i

Updated on 23 Oct 2026

Careful: v1.41.1 has 7 known vulnerabilities, and 3 have no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 60/100
  • Security Some issues to review
  • Maintenance Maintaining
  • Popularity Niche
  • Community Moderate

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.41.1 — affected i
  • Vulnerabilities on record 9 over 1 year · 4 in the last year i
  • Latest disclosure 25 Jun 2026 i
  • Highest CVSS 6.5 i
  • With no published fix 5 i
  • Stars 98 i
  • OpenSSF scorecard 6/10 i
  • Last release 19 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/mattermost/mattermost-plugin-playbooks, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.41.1-0.20261005142514-61d434666dca 05 Oct 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260930205909-88d4f4d7c4e3 30 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260923222846-6c3a1e39ae4f 23 Sep 2026 M1 U6 Apache-2.0 No Details →
v0.0.0-20260921184327-05bcaf38e166 21 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260921184327-05bcaf38e166 21 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260918135755-11b640d28720 18 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260916094046-377e1997884e 16 Sep 2026 M1 U6 Apache-2.0 No Details →
v0.0.0-20260915211302-583b11e6554f 15 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260915211302-583b11e6554f 15 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260915161524-c7ca45230098 15 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260911171143-1d70f61c1fe0 11 Sep 2026 M1 U6 Apache-2.0 No Details →
v0.0.0-20260910091908-4e23319999d9 10 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260910091908-4e23319999d9 10 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260903124925-884853f1e4d8 03 Sep 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260902202221-986eaa441827 02 Sep 2026 M1 U6 Apache-2.0 No Details →
v0.0.0-20260825193502-7f2e7a676203 25 Aug 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260825193502-7f2e7a676203 25 Aug 2026 M1 U6 Apache-2.0 No Details →
v0.0.0-20260814152253-59bf8bc33c68 14 Aug 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260814152253-59bf8bc33c68 14 Aug 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260729145158-812498d5bf84 29 Jul 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260622213546-090a26decb7e 22 Jun 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260622080502-9962747ba470 22 Jun 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260619174050-09f6563979a1 19 Jun 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260602180419-322bb109d045 02 Jun 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260601113316-7c520e3d0fc6 01 Jun 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260507212919-da4c39fc2520 07 May 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260506143156-bc08bffc0e3d 06 May 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260320205448-c45a5d3edc14 20 Mar 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260317144512-8531b1b75259 17 Mar 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260316224925-705f54a81841 16 Mar 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260316201929-a8b057deea80 16 Mar 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260309184833-887d9cacb616 09 Mar 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260213020129-e1d6ec2c94e6 13 Feb 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260205231244-7be951a2c047 05 Feb 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260204224636-a03a51302df8 04 Feb 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260127194607-8f646f6e5d13 27 Jan 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20260119180806-19d1c56a2d7a 19 Jan 2026 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20251211175948-b919f0073524 11 Dec 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20251113004354-64bd3f52010f 13 Nov 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20251107205428-938dedbd9c7f 07 Nov 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20251030135906-12a62b4f805a 30 Oct 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250924163342-eab7cfa31a32 24 Sep 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250919160807-db0f8a07bcde 19 Sep 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250917170050-8abc29a34357 17 Sep 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250908194157-55e6de0022b9 08 Sep 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250812135224-87c8db0df660 12 Aug 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250723173050-43278a45afaa 23 Jul 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250528124514-817c80babc17 28 May 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250515233734-e23870d66ae1 15 May 2025 M1 U6 Apache-2.0 No Details →
v0.0.0-20250408163728-664fe36f335a 08 Apr 2025 M1 U6 Apache-2.0 No Details →
v0.7.1-0.20250408163728-664fe36f335a 08 Apr 2025 M1 U6 Apache-2.0 No Details →
v1.41.1-0.20250408163728-664fe36f335a 08 Apr 2025 M1 U6 Apache-2.0 No Details →
v0.0.0-20250319115130-363dbfa27078 19 Mar 2025 M1 U6 Apache-2.0 No Details →
v1.41.1 19 Mar 2025 M1 U6 Apache-2.0 No Details →
v0.0.0-20250317133522-c5702ba7b6bf 17 Mar 2025 M1 U6 Apache-2.0 No Details →
v1.41.0 17 Mar 2025 M1 U6 Apache-2.0 No Details →
v0.7.1-0.20250124161559-f9f7064e4d9f 24 Jan 2025 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20250124161559-f9f7064e4d9f 24 Jan 2025 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20250110163727-4c823090e281 10 Jan 2025 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20241223131818-399932e64b31 23 Dec 2024 M1 U6 Apache-2.0 No Details →
v0.0.0-20241204181446-bf2633dad09f 04 Dec 2024 M1 U6 Apache-2.0 No Details →
v0.7.1-0.20241204181446-bf2633dad09f 04 Dec 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20241204181446-bf2633dad09f 04 Dec 2024 M1 U6 Apache-2.0 No Details →
v0.0.0-20241202211736-3e3a5619e2f3 02 Dec 2024 M1 U6 Apache-2.0 No Details →
v0.7.1-0.20241202211736-3e3a5619e2f3 02 Dec 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20241202211736-3e3a5619e2f3 02 Dec 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20241118173840-f66b5c147a86 18 Nov 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20241113145516-6c50600fb615 13 Nov 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20241028143456-26c1c0331b23 28 Oct 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20240913170621-a4e5194b8525 13 Sep 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20240828194623-e8406c212628 28 Aug 2024 M1 U6 Apache-2.0 No Details →
v1.40.0 21 Aug 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20240820210220-72bfd1eea45b 20 Aug 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20240719231741-7e265e5d3c8f 19 Jul 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20240705174546-a45555cc204b 05 Jul 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20240621141715-68bfcba19d1d 21 Jun 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20240603134222-88bea007d972 03 Jun 2024 M1 U6 Apache-2.0 No Details →
v1.39.5-0.20240531235240-9f0e44c50afb 31 May 2024 M1 U6 Apache-2.0 No Details →
v1.39.4 31 May 2024 M1 U6 Apache-2.0 No Details →
v1.39.4-0.20240522152308-c7f7eb909656 22 May 2024 M1 U6 Apache-2.0 No Details →
v1.39.3 10 Apr 2024 M1 U6 Apache-2.0 No Details →
v1.39.3-0.20240410140410-14eb8741240e 10 Apr 2024 M1 U6 Apache-2.0 No Details →
v1.36.1--pre-release 28 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2 28 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240328165949-939af55b1d82 28 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240328165937-146f8037bb1f 28 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240327215554-66f254e2b8de 27 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240327215459-2e9752a17387 27 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240326215221-840a6d3e6b7d 26 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240321180648-1aef10eb40c5 21 Mar 2024 M1 U6 Apache-2.0 No Details →
v0.7.1-0.20240313010138-0ed94b0c3852 13 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240313010138-0ed94b0c3852 13 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240307024937-363c6dc06fc8 07 Mar 2024 M1 U6 Apache-2.0 No Details →
v0.7.1-0.20240305213208-3a88a2c0ea0e 05 Mar 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240305213208-3a88a2c0ea0e 05 Mar 2024 M1 U6 Apache-2.0 No Details →
v0.7.1-0.20240205152213-b0770721754a 05 Feb 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240205152213-b0770721754a 05 Feb 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240115133827-7b54d671d469 15 Jan 2024 M1 U6 Apache-2.0 No Details →
v0.7.1-0.20240105221910-c9cd2e237086 05 Jan 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20240105221910-c9cd2e237086 05 Jan 2024 M1 U6 Apache-2.0 No Details →
v1.39.2-0.20231218172104-672ced583da6 18 Dec 2023 M1 U6 — No Details →
v1.39.2-0.20231116171844-36c71fd7c01b 16 Nov 2023 M1 U6 — No Details →
v1.36.3 10 Nov 2023 M1 U6 — No Details →
v1.39.2-0.20231106205638-0dd64f072daa 06 Nov 2023 M1 U6 — No Details →
v1.39.1 02 Nov 2023 M1 U6 — No Details →
v1.39.1-0.20231010142117-0f09343d7603 10 Oct 2023 M1 U6 — No Details →
v1.39.1-0.20231004200236-2c7d6ede6d0e 04 Oct 2023 M1 U6 — No Details →
v1.39.0 26 Sep 2023 M1 U6 — No Details →
v1.38.2-0.20230926174743-142d9ed4b043 26 Sep 2023 M1 U6 — No Details →
v1.38.2-0.20230926174714-58f1f20d4b9f 26 Sep 2023 M1 U6 — No Details →
v1.38.1 17 Aug 2023 M1 U6 — No Details →
v1.38.1-0.20230817151506-79038742a981 17 Aug 2023 M1 U6 — No Details →
v1.38.0 24 Jul 2023 M1 U6 — No Details →
v1.37.1-0.20230630183249-049838e217ac 30 Jun 2023 M1 U6 — No Details →
v0.0.0-20230627090538-e74a6effcda7 27 Jun 2023 M1 U6 — No Details →
v1.37.0 19 Jun 2023 M1 U6 — No Details →
v1.36.1-0.20230614175521-3d6e8b3f5aef 14 Jun 2023 M1 U6 — No Details →
v1.36.2 05 Jun 2023 M1 U6 — No Details →
v1.36.1-0.20230404162939-eb47bcd1aed9 04 Apr 2023 M1 U6 — No Details →
v1.35.2 03 Apr 2023 M1 U6 — No Details →

The newest 120 of 1,154 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2025 5
  • 2026 4

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 4 of the 9 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/mattermost/mattermost-plugin-playbooks

The 5 most severe of 9 vulnerabilities recorded for this package

Search all 9 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2025-41395: Mattermost Playbooks Denial of Service Vulnerability Due to Improper Prop Validation 6.5 medium No fix published 24 Apr 2025
CVE-2026-26304: Mattermost Plugin Playbooks - Inadequate Permission Verification for Playbook Runs 4.3 medium 1.41.1-0.20260316224925-705f54a81841 16 Mar 2026
CVE-2025-41423: Mattermost Playbooks API Permission Validation Flaw 3.1 low No fix published 24 Apr 2025
CVE-2025-41395: Mattermost Playbooks Improper Prop Validation in RetrospectivePost N/A unrated No fix published 24 Apr 2025
CVE-2025-35965: Mattermost Playbooks Uniqueness Validation Flaw in Task Actions N/A unrated No fix published 24 Apr 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/mattermost/mattermost-plugin-playbooks

Is github.com/mattermost/mattermost-plugin-playbooks safe to use?

Vulert records 9 vulnerabilities for github.com/mattermost/mattermost-plugin-playbooks in Go: 0 critical, 0 high, 2 medium and 1 low, plus 6 not yet rated. 5 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/mattermost/mattermost-plugin-playbooks's Vulert package health score?

Vulert scores github.com/mattermost/mattermost-plugin-playbooks 60/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/mattermost/mattermost-plugin-playbooks affected?

Yes. v1.41.1, the version you would install today, has 7 known vulnerabilities, and 3 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/mattermost/mattermost-plugin-playbooks should I use?

v1.41.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/mattermost/mattermost-plugin-playbooks have?

9 vulnerabilities are recorded for github.com/mattermost/mattermost-plugin-playbooks in the Go ecosystem: 0 critical, 0 high, 2 medium and 1 low, plus 6 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/mattermost/mattermost-plugin-playbooks vulnerabilities disclosed?

4 vulnerabilities were recorded for github.com/mattermost/mattermost-plugin-playbooks in the last 12 months, and the oldest entry in this database dates to 24 Apr 2025. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/mattermost/mattermost-plugin-playbooks are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/mattermost/mattermost-plugin-playbooks for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/mattermost/mattermost-plugin-playbooks version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.