← All credits
Edgar Bellot Micó
6 vulnerability records and advisories credit this contributor.
CVE-2026-14298
Denial of service via resource exhaustion in Mattermost
CVE-2026-9699
Mattermost Agents plugin logs unsanitized OpenAI API keys on authentication errors
CVE-2026-8823
User Manager can demote bot accounts to guest without bot-management permission
CVE-2026-6347
Mattermost Calls plugin exposes TURN server credentials in plaintext in support packets
CVE-2026-6346
Sensitive credentials exposed in plaintext in Mattermost support packets
CVE-2026-3590
Race Condition in Guest Magic Link Authentication Allows Token Reuse