Mattermost resource management error vulnerability

Versions 11.9.1 and earlier of Mattermost, as well as versions 11.8.5 and earlier, 11.7.10 and earlier, and 11.10.1 and earlier are affected by a resource management error vulnerability. This vulnerability arises because the WebSocket msgpack decoder fails to enforce allocation limits on byte...

CVE-2026-5740

Mattermost CVE-2026-5740 is an unauthenticated denial-of-service issue affecting Mattermost Server versions 11.6.x up to 11.6.0, 11.5.x up to 11.5.3, 11.4.x up to 11.4.4, and 10.11.x up to 10.11.14. The root cause is improper validation of msgpack-encoded WebSocket frames before memory allocation...