EUVD-2025-1700

Malicious code in bioql PyPI...

CVE-2025-0476 Mobile crash via file with specially crafted filename

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

CVE-2025-0476

Mattermost Mobile Apps (versions <= 2.22.0) are vulnerable due to improper handling of specially crafted attachment names, which can crash the mobile app for any user who opens a channel containing such an attachment. The issue is a denial-of-service-like crash rather than data disclosure. Aff...

CVE-2024-24975

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app...

CVE-2024-1402: Uncontrolled Resource Consumption

Mattermost fails to check if a custom emoji reaction exists when sending it to a post and to limit the amount of custom emojis allowed to be added in a post, allowing an attacker sending a huge amount of non-existent custom emojis in a post to crash the mobile app of a user seeing the post and to...