9.0.2

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-12	CVE-2023-49874	Unspecified vulnerability in Mattermost Server Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest to update the tasks of a private playbook run if they know the run ID. network low complexity mattermost	4.3
2023-12-06	CVE-2023-6458	Injection vulnerability in Mattermost Server Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal. network low complexity mattermost CWE-74 critical	9.8