Juho Forsén

Outgoing OAuth connection client secret exposure during connection validation

Disclosure of AD/LDAP bind password via Test Connection

Mattermost Desktop App plugin popout scheme validation bypass

Mattermost Desktop App Missing IPC Sender Validation in Calls Leave Handler

Plaintext pre-auth secret exposure via Desktop App diagnostics report

Markdown image rendering bypass in AI bot tool result posts in Mattermost

Client4 fails to validate path parameters

SSRF via Host Header Spoofing in Custom Slash Commands

Memory Exhaustion via Malicious 7zip File Upload

Memory Exhaustion via Malformed PSD File Upload