Mattermost doesn't validate the Host header when constructing response URLs for custom slash command
Low severity
GitHub Reviewed
Published
May 18, 2026
to the GitHub Advisory Database
•
Updated Jun 1, 2026
Give feedback on Dependabot alerts