Skip to content

Mattermost Confluence plugin doesn't properly escape user-controlled display names in HTML template rendering

High severity GitHub Reviewed Published Feb 6, 2026 to the GitHub Advisory Database • Updated Feb 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts