GHSA-8Q49-2H5H-434X FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller

Summary The OpenAPI adapter's spec-change poller OpenApiSpecPoller re-fetched the configured spec url on a timer using a raw global fetch, bypassing the SSRF guard safeFetch / assertUrlSafe that OpenAPIToolGenerator.fromURL applies to the initial spec load. As a result, the pinning/DNS-resolution...

SUSE CVE-2016-11066

An issue was discovered in Mattermost Server before 3.2.0. The initialload API disclosed unnecessary personal information...

GO-2025-4047 Mattermost Server: initial_load API exposes unnecessary information in github.com/mattermost/mattermost-server

Mattermost Server: initialload API exposes unnecessary information in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fr...

CVE-2016-11066

An issue was discovered in Mattermost Server before 3.2.0. The initialload API disclosed unnecessary personal information...

Mattermost Server: initial_load API exposes unnecessary information

An issue was discovered in Mattermost Server before 3.1.1. The initialload API disclosed unnecessary personal information...

GHSA-R93J-3MMP-PX57 Mattermost Server: initial_load API exposes unnecessary information

An issue was discovered in Mattermost Server before 3.1.1. The initialload API disclosed unnecessary personal information...

Mattermost Server Information Disclosure Vulnerability (CNVD-2020-35456)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in the initialload API in Mattermost Server versions prior to 3.2.0. An attacker can exploit this vulnerability to obtain personal information...

CVE-2017-14748

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service season bans and SR losses for other users by leaving a competitive match at a specific time during the initial loading of that match...