CVE-2026-3117: Missing Authorization

Mattermost Plugins versions =11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the gitlab instance option or the /gitlab webhook option commands...

CVE-2025-47888

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...

CVE-2025-47888

The Jenkins DingTalk Plugin (versions 2.7.3 and earlier ) is vulnerable to Improper Input Validation because it unconditionally disables SSL/TLS certificate and hostname validation for connections to configured DingTalk webhooks. This flaw allows an attacker to intercept and manipulate secure com...