{"id":3580031,"name":"github.com/mattermost/mattermost-plugin-github","ecosystem":"go","description":"","homepage":"https://github.com/mattermost/mattermost-plugin-github","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/mattermost/mattermost-plugin-github","keywords_array":[],"namespace":"github.com/mattermost","versions_count":18,"first_release_published_at":"2018-08-09T11:14:44.000Z","latest_release_published_at":"2020-05-28T18:16:10.000Z","latest_release_number":"v1.0.0","last_synced_at":"2026-10-03T13:16:42.017Z","created_at":"2022-04-11T04:01:42.490Z","updated_at":"2026-10-03T20:43:43.795Z","registry_url":"https://pkg.go.dev/github.com/mattermost/mattermost-plugin-github","install_command":"go get github.com/mattermost/mattermost-plugin-github","documentation_url":"https://pkg.go.dev/github.com/mattermost/mattermost-plugin-github#section-documentation","metadata":null,"repo_metadata":{"id":40464745,"uuid":"122987053","full_name":"mattermost/mattermost-plugin-github","owner":"mattermost","description":"GitHub plugin for Mattermost","archived":false,"fork":false,"pushed_at":"2026-09-21T06:48:40.000Z","size":10911,"stargazers_count":180,"open_issues_count":91,"forks_count":181,"subscribers_count":28,"default_branch":"master","last_synced_at":"2026-10-03T12:53:25.334Z","etag":null,"topics":["github","github-integration","hacktoberfest","mattermost","mattermost-plugin"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mattermost.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE.txt","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-02-26T15:12:08.000Z","updated_at":"2026-10-01T20:14:20.000Z","dependencies_parsed_at":"2026-02-20T06:07:09.640Z","dependency_job_id":"570e302a-4cf7-44ac-950a-7473f5ee3a56","html_url":"https://github.com/mattermost/mattermost-plugin-github","commit_stats":null,"previous_names":[],"tags_count":57,"template":false,"template_full_name":null,"purl":"pkg:github/mattermost/mattermost-plugin-github","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mattermost","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/sbom","scorecard":{"id":626321,"data":{"date":"2025-08-11","repo":{"name":"github.com/mattermost/mattermost-plugin-github","commit":"7840e828637f57b55f819d309db1ef5bd1d5c3ab"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.2,"checks":[{"name":"Maintained","score":8,"reason":"10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:13","Warn: no topLevel permission defined: .github/workflows/playwright.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/mattermost/mattermost-plugin-github/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/mattermost/mattermost-plugin-github/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/mattermost/mattermost-plugin-github/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/mattermost/mattermost-plugin-github/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/mattermost/mattermost-plugin-github/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/mattermost/mattermost-plugin-github/playwright.yml/master?enable=pin","Warn: npmCommand not pinned by hash: e2e/playwright/setup-environment:10","Warn: npmCommand not pinned by hash: e2e/playwright/setup-environment:14","Warn: npmCommand not pinned by hash: e2e/playwright/setup-environment:18","Info:   5 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   2 third-party GitHubAction dependencies pinned","Info:   1 out of   4 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Warn: 'stale review dismissal' is disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Warn: 'last push approval' is disabled on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":8,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: signed release artifact: mattermost-plugin-github-v2.4.0-darwin-amd64.tar.gz.asc: https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.4.0","Info: signed release artifact: mattermost-plugin-github-v2.4.0-rc2-darwin-amd64.tar.gz.asc: https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.4.0-rc2","Info: signed release artifact: mattermost-plugin-github-v2.4.0-rc1-darwin-amd64.tar.gz.asc: https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.4.0-rc1","Info: signed release artifact: mattermost-plugin-github-v2.3.0-darwin-amd64.tar.gz.asc: https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.3.0","Info: signed release artifact: mattermost-plugin-github-latest.tar.gz.asc: https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.3.0-rc1","Warn: release artifact v2.4.0 does not have provenance: https://api.github.com/repos/mattermost/mattermost-plugin-github/releases/210706440","Warn: release artifact v2.4.0-rc2 does not have provenance: https://api.github.com/repos/mattermost/mattermost-plugin-github/releases/209311616","Warn: release artifact v2.4.0-rc1 does not have provenance: https://api.github.com/repos/mattermost/mattermost-plugin-github/releases/204064044","Warn: release artifact v2.3.0 does not have provenance: https://api.github.com/repos/mattermost/mattermost-plugin-github/releases/163605596","Warn: release artifact v2.3.0-rc1 does not have provenance: https://api.github.com/repos/mattermost/mattermost-plugin-github/releases/161203422"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/mattermost/.github/SECURITY.md:1","Info: Found linked content: github.com/mattermost/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/mattermost/.github/SECURITY.md:1","Info: Found text in security policy: github.com/mattermost/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 29 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"10 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-56x4-j7p9-fcf9","Warn: Project is vulnerable to: GHSA-v78c-4p63-2j6c","Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-21T06:34:58.783Z","repository_id":40464745,"created_at":"2025-08-21T06:34:58.783Z","updated_at":"2025-08-21T06:34:58.783Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343072799,"owners_count":37982891,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-10-03T02:00:07.567Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"mattermost","name":"Mattermost","uuid":"9828093","kind":"organization","description":"Mattermost is a secure collaboration platform for connecting your teams, tools and processes to accelerate mission-critical work.","email":"info@mattermost.com","website":"https://mattermost.com","location":null,"twitter":"mattermost","company":null,"icon_url":"https://avatars.githubusercontent.com/u/9828093?v=4","repositories_count":268,"last_synced_at":"2026-10-03T04:48:04.342Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/mattermost","funding_links":[],"total_stars":53606,"followers":2617,"following":0,"created_at":"2022-11-05T13:51:23.299Z","updated_at":"2026-10-03T04:48:04.438Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mattermost","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mattermost/repositories"},"tags":[{"name":"v2.7.1","sha":"5e32dfe6efe224c7a95ef1d4cb5464dc715ccadd","kind":"tag","published_at":"2026-05-08T13:14:53.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.7.1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.1/manifests"},{"name":"v2.7.1-rc2","sha":"5e32dfe6efe224c7a95ef1d4cb5464dc715ccadd","kind":"tag","published_at":"2026-05-08T07:59:52.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.7.1-rc2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.7.1-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.7.1-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.1-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.1-rc2/manifests"},{"name":"v2.7.1-rc1","sha":"9583797b9fcfb211c4fdc6771730d19e3eacef9a","kind":"tag","published_at":"2026-04-29T19:27:47.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.7.1-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.7.1-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.7.1-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.1-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.1-rc1/manifests"},{"name":"v2.7.0","sha":"c569eafb00768888d0bd5713518640076c8bcd0c","kind":"tag","published_at":"2026-04-07T12:41:52.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.7.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.0/manifests"},{"name":"v2.7.0-rc2","sha":"59a05710dac13554adc707b2059f8f3dfee854e5","kind":"tag","published_at":"2026-03-31T13:31:23.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.7.0-rc2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.7.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.7.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.0-rc2/manifests"},{"name":"v2.7.0-rc1","sha":"c2840e980b3c2bd08db656eaa6a0fe26bcbf4695","kind":"tag","published_at":"2026-03-31T12:25:10.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.7.0-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.7.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.7.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.7.0-rc1/manifests"},{"name":"v2.6.0","sha":"4b03e0c283117b58b269e03eb26f9899da4e509d","kind":"tag","published_at":"2026-02-09T14:05:28.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.6.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.6.0/manifests"},{"name":"v2.6.0-rc1","sha":"4b03e0c283117b58b269e03eb26f9899da4e509d","kind":"tag","published_at":"2026-01-30T16:52:04.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.6.0-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.6.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.6.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.6.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.6.0-rc1/manifests"},{"name":"v2.5.0","sha":"041c9e07673d176f47e40bc7f9ad721d908d2875","kind":"commit","published_at":"2025-10-06T14:30:44.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.5.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.5.0/manifests"},{"name":"v2.5.0-rc2","sha":"041c9e07673d176f47e40bc7f9ad721d908d2875","kind":"commit","published_at":"2025-10-06T14:30:44.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.5.0-rc2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.5.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.5.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.5.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.5.0-rc2/manifests"},{"name":"v2.5.0-rc1","sha":"32b06d2e18e21cfa7d203447d55372cd9228c5eb","kind":"commit","published_at":"2025-09-04T13:51:36.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.5.0-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.5.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.5.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.5.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.5.0-rc1/manifests"},{"name":"v2.4.0","sha":"b040954460cddb95c6df42f7bc4bd0f26c050ff0","kind":"commit","published_at":"2025-04-07T06:32:23.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.4.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.4.0/manifests"},{"name":"v2.4.0-rc2","sha":"f54a75fec4aa6bcd1ddd7d0c9b4a271efeaa39db","kind":"tag","published_at":"2025-03-31T11:01:42.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.4.0-rc2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.4.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.4.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.4.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.4.0-rc2/manifests"},{"name":"v2.4.0-rc1","sha":"6b2cd35f72cb58036d85aba4e97a885bf773c98f","kind":"commit","published_at":"2025-01-30T12:23:51.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.4.0-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.4.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.4.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.4.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.4.0-rc1/manifests"},{"name":"v2.3.0","sha":"2d1479b73a964b52da42f97d8734f62c88288414","kind":"tag","published_at":"2024-07-02T15:30:46.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.3.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.3.0/manifests"},{"name":"v2.3.0-rc1","sha":"664345dc55203c25cd02fb12732f0407e27bba34","kind":"tag","published_at":"2024-06-19T04:47:50.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.3.0-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.3.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.3.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.3.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.3.0-rc1/manifests"},{"name":"v2.2.0","sha":"376f8816602d83a4cb41809339f83e106ef07bd4","kind":"commit","published_at":"2024-02-13T15:14:53.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.2.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.0/manifests"},{"name":"v2.2.1-rc1","sha":"376f8816602d83a4cb41809339f83e106ef07bd4","kind":"commit","published_at":"2024-02-13T15:14:53.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.2.1-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.2.1-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.2.1-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.1-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.1-rc1/manifests"},{"name":"v2.2.0-rc3","sha":"36e72f47bfbf10d6631e6f479a5e7d5c49568bbc","kind":"commit","published_at":"2024-01-15T09:16:53.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.2.0-rc3","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.2.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.2.0-rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.0-rc3/manifests"},{"name":"v2.1.8","sha":"0d7f8ee2abc19608de4505457c0bdc4db6cc2eab","kind":"commit","published_at":"2023-12-13T09:09:38.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.8","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.8/manifests"},{"name":"v2.2.0-rc2","sha":"fb518c0cae1abd1cb57b80899c990a669112c336","kind":"commit","published_at":"2023-12-05T12:32:38.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.2.0-rc2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.2.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.2.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.0-rc2/manifests"},{"name":"v2.1.7","sha":"aa70cf177cda3f3cd248889761effe65b8064f50","kind":"commit","published_at":"2023-11-10T08:17:35.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.7","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.7/manifests"},{"name":"v2.1.6","sha":"926294cba4e08411039b9e04e0ccf2b4681cf4fc","kind":"commit","published_at":"2023-04-28T16:15:15.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.6","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.6/manifests"},{"name":"v2.1.6-rc1","sha":"926294cba4e08411039b9e04e0ccf2b4681cf4fc","kind":"commit","published_at":"2023-04-28T16:15:15.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.6-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.6-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.6-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.6-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.6-rc1/manifests"},{"name":"v2.1.5","sha":"456dce5aa6df22f45cc2aef312e1b10eb0581d2f","kind":"commit","published_at":"2023-03-30T15:45:39.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.5","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.5/manifests"},{"name":"v2.2.0-rc1","sha":"e1fd32314349041a6e2ca293191fc59fffc5866c","kind":"commit","published_at":"2023-03-17T16:29:10.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.2.0-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.2.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.2.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.2.0-rc1/manifests"},{"name":"v2.1.4","sha":"fd7459b5168d5edf2ed38c32e9e60f62e812b065","kind":"commit","published_at":"2022-11-29T16:10:50.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.4","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"1be093c586cbe79d094c00f9e3355709ae485ad1","kind":"commit","published_at":"2022-10-31T12:28:20.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.3","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.3/manifests"},{"name":"v2.1.3-with-cgo-fix","sha":"1be093c586cbe79d094c00f9e3355709ae485ad1","kind":"commit","published_at":"2022-10-31T12:28:20.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.3-with-cgo-fix","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.3-with-cgo-fix","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.3-with-cgo-fix","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.3-with-cgo-fix","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.3-with-cgo-fix/manifests"},{"name":"v2.1.3-rc2","sha":"1be093c586cbe79d094c00f9e3355709ae485ad1","kind":"commit","published_at":"2022-10-31T12:28:20.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.3-rc2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.3-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.3-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.3-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.3-rc2/manifests"},{"name":"v2.1.3-rc1","sha":"cd64636f58e0d0f0ad4482c6f99424768dc092ce","kind":"commit","published_at":"2022-10-01T12:27:33.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.3-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.3-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.3-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.3-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.3-rc1/manifests"},{"name":"v2.1.2","sha":"d13f5a56faacbd99f83033dfd51f8778ab72bf0a","kind":"commit","published_at":"2022-08-11T01:12:33.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.2/manifests"},{"name":"v2.1.2-rc1","sha":"d13f5a56faacbd99f83033dfd51f8778ab72bf0a","kind":"commit","published_at":"2022-08-11T01:12:33.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.2-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.2-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.2-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.2-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.2-rc1/manifests"},{"name":"v2.1.1","sha":"c9bc0fb2ff4286847b3a82a7bbf5a982573ea370","kind":"commit","published_at":"2022-03-25T13:42:39.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"86db5cab4baca9312f3f2782c71825da4fbd90d7","kind":"commit","published_at":"2022-03-01T15:36:00.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.1.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"aa44d3bee42bf20eb3fc9151cf6f833e4092c179","kind":"commit","published_at":"2021-04-17T07:17:03.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.0.1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"ed9060a93008376a2f201e8820112759ce19c7fb","kind":"commit","published_at":"2020-10-15T09:25:05.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.0.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.0.0/manifests"},{"name":"v2.0.0-rc2","sha":"42185ff874963bed1efd8bc84c81462184d7cca8","kind":"commit","published_at":"2020-10-08T09:25:53.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.0.0-rc2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.0.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.0.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.0.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.0.0-rc2/manifests"},{"name":"v2.0.0-rc1","sha":"e9247eec4282f95518c8133a3bf3d7aa7c7e5f7c","kind":"commit","published_at":"2020-09-18T06:08:24.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v2.0.0-rc1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v2.0.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v2.0.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.0.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v2.0.0-rc1/manifests"},{"name":"v1.0.0","sha":"bdb2b98c864bd6368bc79b1029af40fe082103f9","kind":"commit","published_at":"2020-05-28T18:16:10.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v1.0.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v1.0.0/manifests"},{"name":"v0.14.0","sha":"88d28a4d9dfc78fcec41256799083c029aef4010","kind":"commit","published_at":"2020-03-24T21:04:13.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.14.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.14.0/manifests"},{"name":"v0.13.0","sha":"3bb69761c1dc04a4d4c4bc16e2440ec9a64ad2bf","kind":"commit","published_at":"2020-01-30T08:43:29.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.13.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.13.0/manifests"},{"name":"v0.12.0","sha":"e4196fddf4b6fbf9c1f6e16a4845d48bb1c11d57","kind":"commit","published_at":"2019-10-25T21:59:11.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.12.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"4a692b670dccc9f9bb103b31fd1d87caaba45c18","kind":"tag","published_at":"2019-10-03T17:37:15.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.11.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.11.0/manifests"},{"name":"v0.10.2","sha":"f199036fefa553e64c5093ab6340371b8521ff97","kind":"tag","published_at":"2019-06-10T16:35:29.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.10.2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.10.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.10.2/manifests"},{"name":"v0.10.1","sha":"ffad61a594fe00a0cac2b77e4b6077cdb96468dd","kind":"tag","published_at":"2019-06-05T17:22:20.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.10.1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.10.1/manifests"},{"name":"v0.9.2","sha":"0eb9e81d5137b60b7ef59a699b42d95464337869","kind":"tag","published_at":"2019-06-05T16:43:56.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.9.2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.9.2/manifests"},{"name":"v0.10.0","sha":"a13c6f0b6d9e57c39480479e0a477a474cfde1ea","kind":"tag","published_at":"2019-06-03T17:39:44.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.10.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.10.0/manifests"},{"name":"v0.9.1","sha":"dbc90c3023adacf159f36ba0e62603cceaa02478","kind":"commit","published_at":"2019-04-09T16:44:01.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.9.1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"61b26b91bf30826f6a2219d99bf00b310bef4011","kind":"commit","published_at":"2019-04-08T18:23:28.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.9.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"e3f9a62f48ffa1257e8e4148840500ed79e05313","kind":"commit","published_at":"2019-02-22T22:01:25.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.8.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.8.0/manifests"},{"name":"v0.7.1","sha":"58f9a4cfbb3ead3e0005248cc6ea06692ec952f9","kind":"commit","published_at":"2018-12-14T13:51:28.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.7.1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"d179a3443b2d986186e7238279187b0629876c2d","kind":"commit","published_at":"2018-11-16T22:15:58.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.7.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.7.0/manifests"},{"name":"v0.6.2","sha":"84c0a34e81d5fe735852254637b664c620bcff32","kind":"commit","published_at":"2018-09-21T17:54:16.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.6.2","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.6.2/manifests"},{"name":"v0.6.1","sha":"aa77de3aed86539be58074fae9f8a454d451ef7e","kind":"commit","published_at":"2018-09-14T14:46:00.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.6.1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.6.1/manifests"},{"name":"v0.6.0","sha":"2bc0ac80d6c48723151dd3c1485755a3c061c2f8","kind":"commit","published_at":"2018-09-14T01:06:29.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.6.0","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.6.0/manifests"},{"name":"v0.0.1","sha":"e61ad1fb735cffe3acb096daf61d400d119aeb0a","kind":"commit","published_at":"2018-08-09T11:14:44.000Z","download_url":"https://codeload.github.com/mattermost/mattermost-plugin-github/tar.gz/v0.0.1","html_url":"https://github.com/mattermost/mattermost-plugin-github/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mattermost/mattermost-plugin-github@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-10-03T20:43:43.795Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":4.7858697381991195,"dependent_packages_count":8.423428357662951,"stargazers_count":4.166761394755715,"forks_count":2.3130532550982656,"docker_downloads_count":null,"average":4.922278186429013},"purl":"pkg:golang/github.com/mattermost/mattermost-plugin-github","advisories":[{"uuid":"GSA_kwCzR0hTQS1yNXZmLWdyY3gtNXZxcM4ABXS4","url":"https://github.com/advisories/GHSA-r5vf-grcx-5vqp","title":"Mattermost allows authenticated users to gain access to private repositories","description":"Mattermost versions 11.6.x \u003c= 11.6.0, 11.5.x \u003c= 11.5.3, 11.4.x \u003c= 11.4.4, 10.11.x \u003c= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to gain access to private repositories via modifying the scope parameter in the GitHub authorization URL. Mattermost Advisory ID: MMSA-2026-00628","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-05-26T13:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-28735","https://mattermost.com/security-updates","https://github.com/mattermost/mattermost-plugin-github/commit/6e6b740c4852cdfa136ee0ced160da832285c353","https://github.com/advisories/GHSA-r5vf-grcx-5vqp"],"source_kind":"github","identifiers":["GHSA-r5vf-grcx-5vqp","CVE-2026-28735"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-30T00:00:09.170Z","updated_at":"2026-10-02T15:02:22.127Z","epss_percentage":0.0023,"epss_percentile":0.12515,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yNXZmLWdyY3gtNXZxcM4ABXS4","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yNXZmLWdyY3gtNXZxcM4ABXS4","packages":[{"ecosystem":"go","package_name":"github.com/mattermost/mattermost-plugin-github","versions":[{"first_patched_version":"1.0.1-0.20260318132218-6e6b740c4852","vulnerable_version_range":"\u003c 1.0.1-0.20260318132218-6e6b740c4852"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost-plugin-github"},{"ecosystem":"go","package_name":"github.com/mattermost/mattermost-server","versions":[{"first_patched_version":"10.11.15","vulnerable_version_range":"\u003e= 10.11.0, \u003c 10.11.15"},{"first_patched_version":"11.4.5","vulnerable_version_range":"\u003e= 11.4.0, \u003c 11.4.5"},{"first_patched_version":"11.5.4","vulnerable_version_range":"\u003e= 11.5.0, \u003c 11.5.4"},{"first_patched_version":"11.6.1","vulnerable_version_range":"= 11.6.0"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost-server"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yNXZmLWdyY3gtNXZxcM4ABXS4/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qbXZyLXI1aG0tZnhmcs4ABXSh","url":"https://github.com/advisories/GHSA-jmvr-r5hm-fxfr","title":"Mattermost doesn't enforce request body size limits on plugin HTTP endpoints","description":"Mattermost versions 11.6.x \u003c= 11.6.0, 11.5.x \u003c= 11.5.3, 11.4.x \u003c= 11.4.4, 10.11.x \u003c= 10.11.14 fail to enforce request body size limits on plugin HTTP endpoints which allows an attacker to cause a denial of service via crafted oversized HTTP requests.. Mattermost Advisory ID: MMSA-2026-00646","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-26T13:30:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-5308","https://mattermost.com/security-updates","https://github.com/mattermost/mattermost-plugin-github/commit/9b41b1fd43c408f4be53026ee337bbeaa74ad47c","https://github.com/advisories/GHSA-jmvr-r5hm-fxfr"],"source_kind":"github","identifiers":["GHSA-jmvr-r5hm-fxfr","CVE-2026-5308"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-29T23:00:08.867Z","updated_at":"2026-10-03T11:01:55.161Z","epss_percentage":0.00445,"epss_percentile":0.35935,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qbXZyLXI1aG0tZnhmcs4ABXSh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qbXZyLXI1aG0tZnhmcs4ABXSh","packages":[{"ecosystem":"go","package_name":"github.com/mattermost/mattermost-plugin-github","versions":[{"first_patched_version":"1.0.1-0.20260410143745-9b41b1fd43c4","vulnerable_version_range":"\u003c 1.0.1-0.20260410143745-9b41b1fd43c4"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost-plugin-github"},{"ecosystem":"go","package_name":"github.com/mattermost/mattermost-server","versions":[{"first_patched_version":"10.11.15","vulnerable_version_range":"\u003e= 10.11.0, \u003c 10.11.15"},{"first_patched_version":"11.4.5","vulnerable_version_range":"\u003e= 11.4.0, \u003c 11.4.5"},{"first_patched_version":"11.5.4","vulnerable_version_range":"\u003e= 11.5.0, \u003c 11.5.4"},{"first_patched_version":"11.6.1","vulnerable_version_range":"= 11.6.0"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost-server"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qbXZyLXI1aG0tZnhmcs4ABXSh/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ybXZ2LTh2OHctcmY3eM4ABXSP","url":"https://github.com/advisories/GHSA-rmvv-8v8w-rf7x","title":"Mattermost doesn't validate user-supplied input in API request handlers","description":"Mattermost versions 11.6.x \u003c= 11.6.0, 11.5.x \u003c= 11.5.3, 11.4.x \u003c= 11.4.4, 10.11.x \u003c= 10.11.14 fail to validate user-supplied input in API request handlers which allows an authenticated attacker to crash the plugin process via a crafted HTTP request to the PR details endpoint. Mattermost Advisory ID: MMSA-2026-00638","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-05-26T13:30:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-4646","https://mattermost.com/security-updates","https://github.com/mattermost/mattermost-plugin-github/commit/c2840e980b3c2bd08db656eaa6a0fe26bcbf4695","https://github.com/advisories/GHSA-rmvv-8v8w-rf7x"],"source_kind":"github","identifiers":["GHSA-rmvv-8v8w-rf7x","CVE-2026-4646"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-29T20:00:08.378Z","updated_at":"2026-09-30T09:02:21.142Z","epss_percentage":0.00431,"epss_percentile":0.34686,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ybXZ2LTh2OHctcmY3eM4ABXSP","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ybXZ2LTh2OHctcmY3eM4ABXSP","packages":[{"ecosystem":"go","package_name":"github.com/mattermost/mattermost-plugin-github","versions":[{"first_patched_version":"1.0.1-0.20260330164815-c2840e980b3c","vulnerable_version_range":"\u003c 1.0.1-0.20260330164815-c2840e980b3c"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost-plugin-github"},{"ecosystem":"go","package_name":"github.com/mattermost/mattermost-server","versions":[{"first_patched_version":"10.11.15","vulnerable_version_range":"\u003e= 10.11.0, \u003c 10.11.15"},{"first_patched_version":"11.4.5","vulnerable_version_range":"\u003e= 11.4.0, \u003c 11.4.5"},{"first_patched_version":"11.5.4","vulnerable_version_range":"\u003e= 11.5.0, \u003c 11.5.4"},{"first_patched_version":"11.6.1","vulnerable_version_range":"= 11.6.0"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost-server"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ybXZ2LTh2OHctcmY3eM4ABXSP/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qZjVoLXhmdzQtcDhncM4ABP2N","url":"https://github.com/advisories/GHSA-jf5h-xfw4-p8gp","title":"Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection","description":"Mattermost versions 10.11.x \u003c= 10.11.6 and Mattermost GitHub plugin versions \u003c=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2025-12-17T15:34:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":3.0,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-13352","https://mattermost.com/security-updates","https://github.com/mattermost/mattermost-plugin-github/commit/0deffcfc6bee7eaf01f7c99100e3d12e8d9df68c","https://github.com/mattermost/mattermost/commit/3b05384dd0146c1be3caa620a42e00e46027055d","https://github.com/advisories/GHSA-jf5h-xfw4-p8gp"],"source_kind":"github","identifiers":["GHSA-jf5h-xfw4-p8gp","CVE-2025-13352"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-12-17T23:00:07.105Z","updated_at":"2026-10-03T11:05:10.066Z","epss_percentage":0.00175,"epss_percentile":0.06084,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qZjVoLXhmdzQtcDhncM4ABP2N","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qZjVoLXhmdzQtcDhncM4ABP2N","packages":[{"ecosystem":"go","package_name":"github.com/mattermost/mattermost-plugin-github","versions":[{"first_patched_version":"1.0.1-0.20250829075715-0deffcfc6bee","vulnerable_version_range":"\u003c 1.0.1-0.20250829075715-0deffcfc6bee"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost-plugin-github"},{"ecosystem":"go","package_name":"github.com/mattermost/mattermost","versions":[{"first_patched_version":"11.1.0","vulnerable_version_range":"\u003e= 11.0.0-alpha.1, \u003c 11.1.0"},{"first_patched_version":"10.11.7-0.20251106103514-3b05384dd014","vulnerable_version_range":"\u003c 10.11.7-0.20251106103514-3b05384dd014"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost"},{"ecosystem":"go","package_name":"github.com/mattermost/mattermost/server/v8","versions":[{"first_patched_version":"10.11.7-0.20251106103514-3b05384dd014","vulnerable_version_range":"\u003e= 10.11.0-rc1, \u003c 10.11.7-0.20251106103514-3b05384dd014"}],"purl":"pkg:go/github.com%2Fmattermost%2Fmattermost%2Fserver%2Fv8"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qZjVoLXhmdzQtcDhncM4ABP2N/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/mattermost/mattermost-plugin-github","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/mattermost/mattermost-plugin-github","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/mattermost/mattermost-plugin-github/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-23T20:29:47.318Z","issues_count":120,"pull_requests_count":268,"avg_time_to_close_issue":46073862.62162162,"avg_time_to_close_pull_request":4265857.029268293,"issues_closed_count":74,"pull_requests_closed_count":205,"pull_request_authors_count":47,"issue_authors_count":51,"avg_comments_per_issue":2.8666666666666667,"avg_comments_per_pull_request":3.514925373134328,"merged_pull_requests_count":148,"bot_issues_count":0,"bot_pull_requests_count":90,"past_year_issues_count":2,"past_year_pull_requests_count":52,"past_year_avg_time_to_close_issue":2421557.0,"past_year_avg_time_to_close_pull_request":823455.4390243902,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":41,"past_year_pull_request_authors_count":13,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":3.423076923076923,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":27,"past_year_merged_pull_requests_count":34,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-github/issues","maintainers":[{"login":"mickmister","count":43,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mickmister"},{"login":"Kshitij-Katiyar","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Kshitij-Katiyar"},{"login":"wiggin77","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wiggin77"},{"login":"cpoile","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpoile"},{"login":"avas27JTG","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/avas27JTG"},{"login":"spirosoik","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/spirosoik"},{"login":"cwarnermm","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cwarnermm"},{"login":"hmhealey","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hmhealey"},{"login":"avasconcelos114","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/avasconcelos114"},{"login":"lieut-data","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lieut-data"}],"active_maintainers":[{"login":"cpoile","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpoile"},{"login":"avasconcelos114","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/avasconcelos114"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmattermost%2Fmattermost-plugin-github/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmattermost%2Fmattermost-plugin-github/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmattermost%2Fmattermost-plugin-github/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmattermost%2Fmattermost-plugin-github/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmattermost%2Fmattermost-plugin-github/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fmattermost%2Fmattermost-plugin-github/codemeta","maintainers":[]}