Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Search results
CVE-LINKED INVENTORY14 SECURITY RECORDS

Mattermost

Mattermost Confluence Plugin

Affected and fixed version statements observed in the public BlackTree CVE catalogue. These statements describe vulnerability scope, not publisher support entitlement.

Lifecycle evidence status

This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.

A missing support date does not mean the product is supported. CVE publication dates and affected-version ranges must not be interpreted as EOL dates.

CVE-observed version history

CVEPublishedAffected versionsFixed version informationPublisher evidence
CVE-2025-13523 6 Feb 2026 < 1.7.0 1.7.0 Update reference ↗
CVE-2025-8285 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-54525 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-54478 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-54463 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-54458 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-53910 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-53857 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-53514 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-52931 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-49221 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-48731 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-44004 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗
CVE-2025-44001 11 Aug 2025 < 1.5.0 1.5.0 Update reference ↗

How this record is maintained

The CVE inventory is reconciled automatically from cve.blacktree.nl. Exact identity matches link to existing Lifecycle product or package histories. Unmatched products stay in a prioritised publisher-source research queue, and Lifecycle marks the date gap instead of inferring a support boundary from vulnerability data.