Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/mattermost@5.26.2-1
purl pkg:alpm/archlinux/mattermost@5.26.2-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-4ndn-vpw4-17gz go: encoding/xml: XML directives instability CVE-2020-29510
VCID-qway-uy4e-vucf go: encoding/xml: XML element instability CVE-2020-29511
VCID-w8xe-6aaj-aycr Authentication Bypass in github.com/russellhaering/gosaml2 ### Impact Given a valid SAML Response, it may be possible for an attacker to mutate the XML document in such a way that gosaml2 will trust a different portion of the document than was signed. Depending on the implementation of the Service Provider this enables a variety of attacks, including users accessing accounts other than the one to which they authenticated in the Identity Provider, or full authentication bypass. ### Patches Service Providers utilizing gosaml2 should upgrade to v0.6.0 or greater. CVE-2020-29509
GHSA-xhqq-x44f-9fgg

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:58.361072+00:00 Arch Linux Importer Fixing VCID-w8xe-6aaj-aycr https://security.archlinux.org/AVG-1358 38.0.0
2026-04-01T18:26:58.338952+00:00 Arch Linux Importer Fixing VCID-4ndn-vpw4-17gz https://security.archlinux.org/AVG-1358 38.0.0
2026-04-01T18:26:58.318411+00:00 Arch Linux Importer Fixing VCID-qway-uy4e-vucf https://security.archlinux.org/AVG-1358 38.0.0