proxy.golang.org: github.com/mattermost/mattermost/server/public

• Homepage: https://github.com/mattermost/mattermost
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost/server/public#section-documentation
• Licenses: other
• Latest release: v0.4.4 (published 6 days ago)
• Last Synced: 2026-08-25T06:09:15.042Z (2 days ago)
• Versions: 50
• Dependent Packages: 13
• Dependent Repositories: 63
• Docker Downloads: 444,355,188
• Rankings:
  • Forks count: 0.038%
  • Stargazers count: 0.055%
  • Dependent repos count: 0.728%
  • Average: 0.896%
  • Dependent packages count: 1.419%
  • Docker downloads count: 2.242%
• Advisories:
  • Mattermost doesn't check the create_post channel permission during post edit operations

proxy.golang.org: github.com/mattermost/mattermost/server/v8

• Homepage: https://github.com/mattermost/mattermost
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost/server/v8#section-documentation
• Licenses: other
• Latest release: v8.0.0-20260625102638-5dfcb93ebda0 (published 2 months ago)
• Last Synced: 2026-08-25T06:09:22.021Z (2 days ago)
• Versions: 1,018
• Dependent Packages: 2
• Dependent Repositories: 1
• Docker Downloads: 444,355,188
• Rankings:
  • Forks count: 0.038%
  • Stargazers count: 0.055%
  • Docker downloads count: 2.242%
  • Average: 2.244%
  • Dependent packages count: 4.177%
  • Dependent repos count: 4.706%
• Advisories:
  • Mattermost doesn't require system-level permission when patching protected default system roles
  • Mattermost doesn't require role-management authorization when setting the scheme_admin flag on group syncable link and patch endpoints
  • Mattermost doesn't restrict role_updated websocket event broadcasts to members of the affected team or channel
  • Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation
  • Mattermost doesn't validate that a username returned during bot registration belongs to a bot account
  • Mattermost doesn't sanitize FileInfo.Name received from federated peers during shared channel file sync
  • Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations
  • Mattermost doesn't filter nil elements from outgoing webhook attachment payloads before processing
  • Mattermost doesn't properly validate msgpack-encoded WebSocket frames before memory allocation
  • Mattermost has an Incorrect Authorization issue
  • Mattermost doesn't validate the X-Requested-With header on the burn-on-read reveal endpoint
  • Mattermost doesn't verify channel membership when processing AI-assisted message rewrites
  • Mattermost doesn't prevent disclosure of created user password
  • Mattermost doesn't check public/private permissions
  • Mattermost doesn't validate the Host header when constructing response URLs for custom slash command
  • Mattermost doesn't check if {{team_id}} was being changed when updating playbooks
  • Mattermost doesn't enforce slash command trigger-word uniqueness during command updates
  • Mattermost doesn't sanitize sensitive configuration fields before including them in support packet generation
  • Mattermost does not verify remote cluster channel access when processing shared channel membership removals
  • Mattermost doesn't check the create_post channel permission during post edit operations
  • Mattermost doesn't escape some variables that could contain malicious content during error page composition
  • Mattermost doesn't enforce client identity binding during the OAuth authorization code redemption flow
  • Mattermost doesn't validate that the RefreshedToken differs from the original invite token during remote cluster invite confirmation
  • Mattermost doesn't validate 7zip archive structure before processing
  • Mattermost has session spoofing due to lack of single-use consumption of guest magic link tokens enforcement
  • Mattermost doesn't validate CSRF tokens on an authentication endpoint
  • Mattermost allows system administrators to read arbitrary host files via malicious AdvancedLoggingJSON configuration
  • Mattermost doesn't validate decompressed archive entry sizes during file extraction
  • Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences
  • Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope
  • Mattermost has an Incorrect Authorization issue
  • Mattermost doesn't properly validate CSRF tokens
  • Mattermost allows attackers to take over arbitrary user accounts via overly permissive substring matching flaw
  • Mattermost: Authenticated DoS through failure to prevent rendering of external SVGs on link embeds
  • Mattermost fails to validate user's authentication method when processing account auth type switch
  • Mattermost fails to properly enforce read permissions in search API endpoints
  • Mattermost fails to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation
  • Mattermost fails to validate team-specific upload_file permissions
  • Mattermost fails to use consistent error responses when handling the /mute command
  • Mattermost fails to filter invite IDs based on user permissions
  • Mattermost fails to preserve the redacted state of burn-on-read posts during deletion
  • Mattermost fails to limit the size of responses from integration action endpoints
  • Mattermost allows a removed team member to enumerate all public channels within a private team
  • Mattermost allows attackers to spoof permalink embeds
  • Mattermost fails to bound memory allocation when processing DOC files
  • Mattermost fails to properly validate User-Agent header tokens
  • Mattermost fails to bound memory allocation when processing PSD image files
  • Mattermost fails to properly handle very long passwords
  • Mattermost fails to properly validate team membership when processing channel mentions
  • Mattermost fails to enforce invite permissions when updating team settings
  • Mattermost fails to sanitize sensitive data in WebSocket messages
  • Mattermost fails to properly validate login method restrictions
  • Mattermost doesn't validate user channel membership when attaching Mattermost posts as comments to Jira issues
  • Mattermost doesn't verify that post actions invoking `/share-issue-publicly` were created by the Jira plugin
  • Mattermost with Jira plugin enabled has Incorrect Implementation of Authentication Algorithm
  • Mattermost has an Invite Token Replay Vulnerability via Channel Membership Manipulation
  • Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection
  • Mattermost has missing redirect URL validation
  • Mattermost fails to validate user permissions in Boards
  • Mattermost fails to validate user permissions when deleting comments in Boards
  • Mattermost fails to to verify the token used during code exchange
  • Mattermost fails to sanitize team email addresses
  • Mattermost fails to properly validate OAuth state tokens during OpenID Connect authentication
  • Mattermost allows other users to determine when users had read channels via channel member objects
  • Mattermost allows system administrators to access password hashes and MFA secrets
  • Mattermost fails to properly restrict access to archived channel search API
  • Mattermost allows an attacker to edit arbitrary posts via a crafted MSTeams plugin OAuth redirect URL
  • Mattermost does not enforce MFA on WebSocket connections
  • Mattermost allows regular users to access archived channel content and files
  • Mattermost Incorrect Authorization vulnerability
  • Mattermost has an Incorrect Authorization vulnerability
  • Mattermost has a Missing Authorization vulnerability
  • Mattermost has an Observable Timing Discrepancy vulnerability
  • Mattermost has a Missing Authorization vulnerability
  • Mattermost has a Missing Authorization vulnerability
  • Mattermost has a Missing Authorization vulnerability
  • Mattermost Path Traversal vulnerability
  • Mattermost boards plugin fails to restrict download access to files
  • Mattermost Open Redirect vulnerability
  • Mattermost Open Redirect vulnerability
  • Mattermost Missing Authorization vulnerability
  • Mattermost Fails to Sanitize File Names
  • Mattermost has Potential Server Crash due to Unvalidated Import Data
  • Mattermost Fails to Sanitize Path Traversal Sequences
  • Mattermost Fails to Properly Validate Team Role Modification
  • Mattermost Fails to Validate Remote Cluster Upload Sessions
  • Mattermost Fails to Validate File Paths
  • Mattermost Does Not Sanitize the Team Invite ID
  • Mattermost Lack of Access Control Validation
  • Mattermost Server SSRF Vulnerability via the Agents Plugin
  • Mattermost Path Traversal vulnerability
  • Mattermost has Insufficiently Protected Credentials
  • Mattermost Missing Authentication for Critical Function
  • Mattermost Incorrect Authorization vulnerability
  • Mattermost Incorrect Authorization vulnerability
  • Mattermost allows an unauthorized Guest user access to Playbook
  • Mattermost allows unauthorized channel member management through playbook runs
  • Mattermost allows authenticated users to write files to arbitrary locations
  • Mattermost allows guest users to view information about public teams they are not members of
  • Mattermost allows authenticated administrator to execute LDAP search filter injection

npmjs.org: mattermost-redux

Common code (API client, Redux stores, logic, utility functions) for building a Mattermost client

• Homepage: https://github.com/mattermost/mattermost/tree/master/webapp/platform/mattermost-redux#readme
• Licenses: MIT
• Latest release: 11.9.0 (published 27 days ago)
• Last Synced: 2026-08-25T06:14:10.602Z (2 days ago)
• Versions: 73
• Dependent Packages: 7
• Dependent Repositories: 371
• Downloads: 14,608 Last month
• Docker Downloads: 91
• Rankings:
  • Dependent repos count: 0.864%
  • Docker downloads count: 1.255%
  • Forks count: 1.845%
  • Average: 2.28%
  • Dependent packages count: 2.788%
  • Downloads: 2.879%
  • Stargazers count: 4.05%
• Maintainers (15)
  • hmhealey
  • mattermost-user
  • crspeller
  • jwilander
  • coreyhulen
  • enahum
  • matterbuild
  • devinbinnie
  • cpoile
  • danielsischy
  • harshil.sharma
  • danielschalla
  • phar-mm
  • evasarafianou
  • matthewbirtch

npmjs.org: @mattermost/types

Shared type definitions used by the Mattermost web app

• Homepage: https://github.com/mattermost/mattermost/tree/master/webapp/platform/types#readme
• Licenses: MIT
• Latest release: 11.9.0 (published 27 days ago)
• Last Synced: 2026-08-25T06:15:09.207Z (2 days ago)
• Versions: 53
• Dependent Packages: 2
• Dependent Repositories: 119
• Downloads: 43,764 Last month
• Rankings:
  • Forks count: 0.432%
  • Stargazers count: 0.548%
  • Dependent repos count: 1.338%
  • Downloads: 1.65%
  • Average: 2.563%
  • Dependent packages count: 8.845%
• Maintainers (15)
  • hmhealey
  • mattermost-user
  • crspeller
  • jwilander
  • coreyhulen
  • enahum
  • matterbuild
  • devinbinnie
  • cpoile
  • danielsischy
  • harshil.sharma
  • danielschalla
  • phar-mm
  • evasarafianou
  • matthewbirtch

npmjs.org: @mattermost/client

JavaScript/TypeScript client for Mattermost

• Homepage: https://github.com/mattermost/mattermost/tree/master/webapp/platform/client#readme
• Licenses: MIT
• Latest release: 11.9.0 (published 27 days ago)
• Last Synced: 2026-08-25T06:10:15.644Z (2 days ago)
• Versions: 53
• Dependent Packages: 2
• Dependent Repositories: 89
• Downloads: 36,161 Last month
• Rankings:
  • Forks count: 0.432%
  • Stargazers count: 0.548%
  • Dependent repos count: 1.49%
  • Downloads: 1.745%
  • Average: 2.612%
  • Dependent packages count: 8.845%
• Maintainers (15)
  • hmhealey
  • mattermost-user
  • crspeller
  • jwilander
  • coreyhulen
  • enahum
  • matterbuild
  • devinbinnie
  • cpoile
  • danielsischy
  • harshil.sharma
  • danielschalla
  • phar-mm
  • evasarafianou
  • matthewbirtch

proxy.golang.org: github.com/Mattermost/Mattermost

• Homepage: https://github.com/Mattermost/Mattermost
• Documentation: https://pkg.go.dev/github.com/Mattermost/Mattermost#section-documentation
• Licenses: other
• Latest release: v2.0.0+incompatible (published over 10 years ago)
• Last Synced: 2026-08-25T06:09:17.449Z (2 days ago)
• Versions: 2
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 4.524%
  • Average: 4.677%
  • Dependent repos count: 4.829%

proxy.golang.org: github.com/Mattermost/mattermost

• Homepage: https://github.com/Mattermost/mattermost
• Documentation: https://pkg.go.dev/github.com/Mattermost/mattermost#section-documentation
• Licenses: other
• Latest release: v4.8.2+incompatible (published about 8 years ago)
• Last Synced: 2026-08-25T06:09:32.393Z (2 days ago)
• Versions: 13
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 4.524%
  • Average: 4.677%
  • Dependent repos count: 4.829%

proxy.golang.org: github.com/mattermost/mattermost/v5

• Homepage:
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost/v5#section-documentation
• Licenses: other
• Latest release: v5.39.3 (published over 4 years ago)
• Last Synced: 2026-08-25T06:09:04.613Z (2 days ago)
• Versions: 392
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Forks count: 0.039%
  • Stargazers count: 0.055%
  • Average: 4.716%
  • Dependent packages count: 8.463%
  • Dependent repos count: 10.306%

proxy.golang.org: github.com/mattermost/mattermost/tools/sharedchannel-test

• Homepage: https://github.com/mattermost/mattermost
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost/tools/sharedchannel-test#section-documentation
• Licenses: other
• Latest release: (published 2 days ago)
• Last Synced: 2026-08-25T06:09:09.689Z (2 days ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 4.644%
  • Average: 4.8%
  • Dependent repos count: 4.956%

proxy.golang.org: github.com/mattermost/mattermost/tools/mattermost-govet

• Homepage: https://github.com/mattermost/mattermost
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost/tools/mattermost-govet#section-documentation
• Licenses: other
• Latest release: (published 2 days ago)
• Last Synced: 2026-08-25T06:10:11.807Z (2 days ago)
• Versions: 0
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 4.674%
  • Average: 4.831%
  • Dependent repos count: 4.988%

proxy.golang.org: github.com/mattermost/mattermost/tools/mmgotool

• Homepage: https://github.com/mattermost/mattermost
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost/tools/mmgotool#section-documentation
• Licenses: other
• Latest release: v0.0.0-20240124191417-8f0abc131673 (published over 2 years ago)
• Last Synced: 2026-08-25T06:10:24.287Z (2 days ago)
• Versions: 368
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Forks count: 0.039%
  • Stargazers count: 0.055%
  • Average: 4.89%
  • Dependent packages count: 8.899%
  • Dependent repos count: 10.567%

proxy.golang.org: github.com/mattermost/mattermost/v6

• Homepage: https://github.com/mattermost/mattermost-server
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost/v6#section-documentation
• Licenses: AGPL-3.0, Apache-2.0
• Latest release: v6.7.2 (published about 4 years ago)
• Last Synced: 2026-08-25T06:09:25.568Z (2 days ago)
• Versions: 39
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Forks count: 0.039%
  • Stargazers count: 0.055%
  • Average: 4.89%
  • Dependent packages count: 8.899%
  • Dependent repos count: 10.567%

proxy.golang.org: github.com/mattermost/mattermost

• Homepage: https://github.com/mattermost/mattermost
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost#section-documentation
• Licenses: other
• Latest release: v9.9.0+incompatible (published about 2 years ago)
• Last Synced: 2026-08-25T06:21:43.381Z (2 days ago)
• Versions: 504
• Dependent Packages: 0
• Dependent Repositories: 0
• Docker Downloads: 19
• Rankings:
  • Forks count: 0.039%
  • Stargazers count: 0.055%
  • Average: 4.89%
  • Dependent packages count: 8.899%
  • Dependent repos count: 10.567%
• Advisories:
  • Mattermost has an Invite Token Replay Vulnerability via Channel Membership Manipulation
  • Mattermost has missing redirect URL validation
  • Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection
  • Mattermost fails to validate user permissions in Boards
  • Mattermost fails to validate user permissions when deleting comments in Boards
  • Mattermost fails to properly restrict access to archived channel search API
  • Mattermost Incorrect Authorization vulnerability

proxy.golang.org: github.com/mattermost/mattermost/server

• Homepage: https://github.com/mattermost/mattermost
• Status: removed
• Documentation: https://pkg.go.dev/github.com/mattermost/mattermost/server#section-documentation
• Licenses: other
• Latest release: (published 3 months ago)
• Last Synced: 2026-08-25T06:09:45.070Z (2 days ago)
• Versions: 0
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 5.103%
  • Average: 5.274%
  • Dependent repos count: 5.445%

npmjs.org: @mattermost/shared

Shared components and utilities for use by the Mattermost web app and its plugins

• Homepage: https://github.com/mattermost/mattermost/tree/master/webapp/platform/shared#readme
• Licenses: MIT
• Latest release: 11.9.0 (published 27 days ago)
• Last Synced: 2026-08-25T06:09:03.488Z (2 days ago)
• Versions: 5
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 645 Last month
• Rankings:
  • Dependent repos count: 22.008%
  • Average: 26.865%
  • Dependent packages count: 31.723%
• Maintainers (15)
  • hmhealey
  • mattermost-user
  • crspeller
  • jwilander
  • coreyhulen
  • enahum
  • matterbuild
  • devinbinnie
  • cpoile
  • danielsischy
  • harshil.sharma
  • danielschalla
  • phar-mm
  • evasarafianou
  • matthewbirtch

npmjs.org: @mattermost/testcontainers

CLI and library for managing Mattermost test environments using Docker containers with automatic port allocation, subpath routing, HA clustering, and isolated dependencies

• Homepage: https://github.com/mattermost/mattermost/tree/master/e2e-tests/testcontainers#readme
• Licenses: other
• Latest release: 0.2.1 (published 6 months ago)
• Last Synced: 2026-08-25T06:16:08.486Z (2 days ago)
• Versions: 7
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 45 Last month
• Rankings:
  • Dependent repos count: 22.945%
  • Average: 28.013%
  • Dependent packages count: 33.081%
• Maintainers (15)
  • hmhealey
  • mattermost-user
  • crspeller
  • jwilander
  • coreyhulen
  • enahum
  • matterbuild
  • devinbinnie
  • cpoile
  • danielsischy
  • harshil.sharma
  • danielschalla
  • phar-mm
  • evasarafianou
  • matthewbirtch

npmjs.org: @mattermost/playwright-lib

A comprehensive end-to-end testing library for Mattermost web, desktop and plugin applications using Playwright

• Homepage: https://github.com/mattermost/mattermost/tree/master/e2e-tests/playwright/lib#readme
• Licenses: MIT
• Latest release: 11.4.0 (published 7 months ago)
• Last Synced: 2026-08-25T06:23:55.119Z (2 days ago)
• Versions: 14
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 114 Last month
• Rankings:
  • Dependent repos count: 24.906%
  • Average: 30.431%
  • Dependent packages count: 35.956%
• Maintainers (15)
  • hmhealey
  • mattermost-user
  • crspeller
  • jwilander
  • coreyhulen
  • enahum
  • matterbuild
  • devinbinnie
  • cpoile
  • danielsischy
  • harshil.sharma
  • danielschalla
  • phar-mm
  • evasarafianou
  • matthewbirtch

npmjs.org: mmtest_playwright-lib

A comprehensive end-to-end testing library for Mattermost web, desktop and plugin applications using Playwright

• Homepage:
• Licenses: MIT
• Latest release: 0.0.8 (published over 1 year ago)
• Last Synced: 2026-08-25T06:10:12.342Z (2 days ago)
• Versions: 9
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 45 Last month
• Rankings:
  • Dependent repos count: 25.063%
  • Average: 30.658%
  • Dependent packages count: 36.252%
• Maintainers (1)
  • saturnino

npmjs.org: mmtest_types

Shared type definitions used by the Mattermost web app

• Homepage: https://github.com/mattermost/mattermost/tree/master/webapp/platform/types#readme
• Licenses: MIT
• Latest release: 10.5.0 (published over 1 year ago)
• Last Synced: 2026-08-25T06:10:25.182Z (2 days ago)
• Versions: 2
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 5 Last month
• Rankings:
  • Dependent repos count: 25.102%
  • Average: 30.706%
  • Dependent packages count: 36.309%
• Maintainers (1)
  • saturnino

npmjs.org: mmtest_client

JavaScript/TypeScript client for Mattermost

• Homepage: https://github.com/mattermost/mattermost/tree/master/webapp/platform/client#readme
• Licenses: MIT
• Latest release: 10.5.0 (published over 1 year ago)
• Last Synced: 2026-08-25T06:23:34.760Z (2 days ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 2 Last month
• Rankings:
  • Dependent repos count: 25.102%
  • Average: 30.706%
  • Dependent packages count: 36.309%
• Maintainers (1)
  • saturnino

npmjs.org: @hmhealey/plugin-support

TODO

• Homepage: https://github.com/mattermost/mattermost/tree/master/webapp/platform/plugin-support#readme
• Licenses: MIT
• Latest release: 10.1.0 (published almost 2 years ago)
• Last Synced: 2026-08-25T06:13:45.577Z (2 days ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 11 Last month
• Rankings:
  • Dependent repos count: 25.559%
  • Average: 31.292%
  • Dependent packages count: 37.026%
• Maintainers (1)
  • hmhealey

npmjs.org: @mattermost/eslint-plugin

ESLint configuration and custom rules used by Mattermost

• Homepage: https://github.com/mattermost/mattermost/tree/master/webapp/platform/eslint-plugin#readme
• Licenses: Apache 2.0
• Latest release: 1.0.0 (published over 2 years ago)
• Last Synced: 2026-08-25T06:18:48.993Z (2 days ago)
• Versions: 2
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 6,536 Last month
• Rankings:
  • Dependent repos count: 32.861%
  • Average: 40.001%
  • Dependent packages count: 47.141%
• Maintainers (15)
  • hmhealey
  • mattermost-user
  • crspeller
  • jwilander
  • coreyhulen
  • enahum
  • matterbuild
  • devinbinnie
  • cpoile
  • danielsischy
  • harshil.sharma
  • danielschalla
  • phar-mm
  • evasarafianou
  • matthewbirtch