CVE-2026-12882

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to parse Markdown autolinks with unmatched trailing closing parentheses in linear time, which allows an authenticated user with permission to create posts to cause excessive server CPU consumption and...

CVE-2026-12882

Mattermost is affected by a denial of service vulnerability in its Markdown autolink parsing (CVE-2026-12882, MMSA-2026-00703). The parser fails to handle autolinks with unmatched trailing closing parentheses in linear time, allowing an authenticated user with post-creation permission to trigger ...

CVE-2026-12882 Mattermost Markdown autolink parsing denial of service

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to parse Markdown autolinks with unmatched trailing closing parentheses in linear time, which allows an authenticated user with permission to create posts to cause excessive server CPU consumption and...

MGASA-2015-0206 Updated ruby-redcarpet packages fix a security vulnerability

Updated ruby-redcarpet packages fix security vulnerability: Redcarpet allows for possible XSS of untrusted markdown if the autolink extension is enabled...