Github.com/mattermost/mattermost-plugin-confluence

This hub aggregates every CVE we track for Github.com/mattermost/mattermost-plugin-confluence, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 14 most recently published vulnerabilities affecting Github.com/mattermost/mattermost-plugin-confluence.

• CVE-2025-13523Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow7.7Feb 6, 2026
• CVE-2025-8285Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin4.0Aug 11, 2025
• CVE-2025-54525Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5Aug 11, 2025
• CVE-2025-54478Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin7.2Aug 11, 2025
• CVE-2025-54463Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9Aug 11, 2025
• CVE-2025-54458Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin5.0Aug 11, 2025
• CVE-2025-53910Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin4.0Aug 11, 2025
• CVE-2025-53857Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin3.7Aug 11, 2025
• CVE-2025-53514Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9Aug 11, 2025
• CVE-2025-52931Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5Aug 11, 2025
• CVE-2025-49221Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin3.7Aug 11, 2025
• CVE-2025-48731Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin6.4Aug 11, 2025
• CVE-2025-44004Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin7.2Aug 11, 2025
• CVE-2025-44001Unauthorized Channel Subscription Read in Mattermost Confluence Plugin4.0Aug 11, 2025