EUVD-2026-32894

A vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the consume or send permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for...

Mattermost: Member role which doesn't have permission to send message can send by executing channel commands

The member role which did not have permission to send messages could send messages by executing channel commands...