CVE-2025-14435

Summary (CVE-2025-14435): Mattermost contains a application-level DoS vulnerability due to unbounded React component re-renders triggered by API errors. Affected versions are 10.11.x ≤ 10.11.8, 11.1.x ≤ 11.1.1, and 11.0.x ≤ 11.0.6. The issue arises because errors from API responses fail to stop r...

CVE-2025-14435 Application-Level DoS via infinite re-render loop in user profile handling

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...