What is GHSA-pg7c-462j-grxv?

GHSA-pg7c-462j-grxv is a security advisory published by GitHub Security Advisories with Medium severity. Mattermost versions 11.6.x \u003c= 11.6.0, 11.5.x \u003c= 11.5.3, 11.4.x \u003c= 11.4.4, 10.11.x \u003c= 10.11.14...

Which CVE IDs does GHSA-pg7c-462j-grxv cover?

GHSA-pg7c-462j-grxv covers the following CVE IDs: CVE-2026-4635. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pg7c-462j-grxv?

GHSA-pg7c-462j-grxv has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-pg7c-462j-grxvMediumCVSS 5.3

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14...

Vendor

GitHub Security Advisories

Published

May 26, 2026

Last Modified

May 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-4635 →

📋 Description

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to archive the channel before removing persistent notifications which allows authenticated user to crash the server via timing the creation of persistent notification message between the server deleting existing persistent notifications and archiving the channel.. Mattermost Advisory ID: MMSA-2026-00637

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-4635
https://mattermost.com/security-updates
https://github.com/advisories/GHSA-pg7c-462j-grxv