Security Updates

This bulletin lists publicly disclosed security issues for Mattermost Server, Desktop, Mobile, and Plugins after a fix is available. Use the table to check whether an advisory affects your deployment and which release contains the fix. Filter by product, severity, issue ID, date, or affected version.

To report a vulnerability, follow the Responsible Disclosure Policy. Subscribe to fix-release notifications on the Security Bulletin signup.

Specific details on security updates are announced 30 days after the fix is available. Mattermost has a mandatory upgrade policy and provides updates for supported releases.