CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects GitHub. Exploitation may require the attacker to be authenticated.
CVE
CVE-2026-20719
Severity
MEDIUM
CVSS
4.3
EPSS
0.35%
GitHub
Original NVD Description
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated users to crash the Mattermost webapp and desktop app via creating an issue or PR on GitHub.. Mattermost Advisory ID: MMSA-2026-00595
Related CVEs
Other vulnerabilities affecting the same vendor(s)