Junglewise Threat Intelligence
CVE-2026-20719: GO-2026-5245 - Mattermost: Authenticated DoS through failure to prevent rendering of external SVGs on link embeds in github.com/mattermost/mattermost-serve
CVE-2026-20719 · Severity: low · CVSS 3.1 · Published 2026-06-25
Technologies: github.com/mattermost/mattermost-server/v6 (Go), github.com/mattermost/mattermost/server/v8 (Go), github.com/mattermost/mattermost-server/v5 (Go), github.com/mattermost/mattermost-server (Go). Vendors: Go.
Executive brief
Mattermost: Authenticated DoS through failure to prevent rendering of external SVGs on link embeds in github.com/mattermost/mattermost-server
Affected products
- Go github.com/mattermost/mattermost-server/v6
- Go github.com/mattermost/mattermost/server/v8
- Go github.com/mattermost/mattermost-server/v5
- Go github.com/mattermost/mattermost-server