Is github.com/mattermost/mattermost-plugin-zoom affected by CVE-2026-0997?

Go github.com/mattermost/mattermost-plugin-zoom is affected in <1.11.0.

Is CVE-2026-0997 being exploited?

Not on the CISA KEV list. EPSS exploit probability is 0.2%.

medium

CVE-2026-0997

Q: Is CVE-2026-0997 being exploited?

Not on the CISA KEV list. EPSS exploit probability is 0.2%.

Go · github.com/mattermost/mattermost-plugin-zoom

Summary

Mattermost Plugin Zoom allows any logged-in user to change Zoom meeting restrictions for arbitrary channels in github.com/mattermost/mattermost-plugin-zoom

Severity: medium
EPSS: 0.2% (p5)
Also known as: GHSA-2phx-frhf-xr55, GO-2026-4519
Published: 2026-02-23

References

https://github.com/advisories/GHSA-2phx-frhf-xr55
https://nvd.nist.gov/vuln/detail/CVE-2026-0997
https://github.com/mattermost/mattermost-plugin-zoom/commit/a8b58c43625ab25746e451acc4f71515d52c8122

Related advisories

CVE-2026-0998 — medium · Go/github.com/mattermost/mattermost-plugin-zoom

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.