GO-2026-6910

Source
https://pkg.go.dev/vuln/GO-2026-6910
Import Source
https://vuln.go.dev/ID/GO-2026-6910.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2026-6910
Aliases
Published
2026-11-05T23:49:57Z
Modified
2026-11-06T00:15:13Z
Summary
Path traversal in API route construction in github.com/mattermost/mattermost/server/public
Details

Path traversal in API route construction in github.com/mattermost/mattermost/server/public

Database specific
{
    "review_status": "REVIEWED",
    "url": "https://pkg.go.dev/vuln/GO-2026-6910"
}
References

Affected packages

Go / github.com/mattermost/mattermost/server/public

Package

Name
github.com/mattermost/mattermost/server/public
View open source insights on deps.dev
Purl
pkg:golang/github.com/mattermost/mattermost/server/public

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.1.22

Ecosystem specific

{
    "imports": [
        {
            "path": "github.com/mattermost/mattermost/server/public/model",
            "symbols": [
                "Client4.AcknowledgePost",
                "Client4.AddChannelMember",
                "Client4.AddChannelMemberWithRootId",
                "Client4.AddChannelMembers",
                "Client4.AddChannelsToRetentionPolicy",
                "Client4.AddTeamMember",
                "Client4.AddTeamMemberFromInvite",
                "Client4.AddTeamMembers",
                "Client4.AddTeamMembersGracefully",
                "Client4.AddTeamsToRetentionPolicy",
                "Client4.AddUserToGroupSyncables",
                "Client4.ApplyIPFilters",
                "Client4.AssignAccessControlPolicies",
                "Client4.AssignBot",
                "Client4.AssignContentFlaggingReviewer",
                "Client4.AttachDeviceProps",
                "Client4.AutocompleteChannelsForTeam",
                "Client4.AutocompleteChannelsForTeamForSearch",
                "Client4.AutocompleteEmoji",
                "Client4.AutocompleteUsers",
                "Client4.AutocompleteUsersInChannel",
                "Client4.AutocompleteUsersInTeam",
                "Client4.CancelJob",
                "Client4.ChannelMembersMinusGroupMembers",
                "Client4.CheckCWSConnection",
                "Client4.CheckExpression",
                "Client4.CheckIntegrity",
                "Client4.ClearServerBusy",
                "Client4.CompleteOnboarding",
                "Client4.ConvertBotToUser",
                "Client4.ConvertUserToBot",
                "Client4.CreateAccessControlPolicy",
                "Client4.CreateBot",
                "Client4.CreateCPAField",
                "Client4.CreateChannel",
                "Client4.CreateChannelBookmark",
                "Client4.CreateCommand",
                "Client4.CreateComplianceReport",
                "Client4.CreateDataRetentionPolicy",
                "Client4.CreateDirectChannel",
                "Client4.CreateEmoji",
                "Client4.CreateGroup",
                "Client4.CreateGroupChannel",
                "Client4.CreateIncomingWebhook",
                "Client4.CreateJob",
                "Client4.CreateOAuthApp",
                "Client4.CreateOutgoingOAuthConnection",
                "Client4.CreateOutgoingWebhook",
                "Client4.CreatePost",
                "Client4.CreatePostEphemeral",
                "Client4.CreateRemoteCluster",
                "Client4.CreateScheduledPost",
                "Client4.CreateScheme",
                "Client4.CreateSidebarCategoryForTeamForUser",
                "Client4.CreateTeam",
                "Client4.CreateTermsOfService",
                "Client4.CreateUpload",
                "Client4.CreateUser",
                "Client4.CreateUserAccessToken",
                "Client4.CreateUserWithInviteId",
                "Client4.CreateUserWithToken",
                "Client4.DatabaseRecycle",
                "Client4.DeleteAccessControlPolicy",
                "Client4.DeleteBrandImage",
                "Client4.DeleteCPAField",
                "Client4.DeleteChannel",
                "Client4.DeleteChannelBookmark",
                "Client4.DeleteCommand",
                "Client4.DeleteDataRetentionPolicy",
                "Client4.DeleteDraft",
                "Client4.DeleteEmoji",
                "Client4.DeleteExport",
                "Client4.DeleteGroup",
                "Client4.DeleteGroupMembers",
                "Client4.DeleteImport",
                "Client4.DeleteIncomingWebhook",
                "Client4.DeleteLdapPrivateCertificate",
                "Client4.DeleteLdapPublicCertificate",
                "Client4.DeleteOAuthApp",
                "Client4.DeleteOutgoingOAuthConnection",
                "Client4.DeleteOutgoingWebhook",
                "Client4.DeletePost",
                "Client4.DeletePreferences",
                "Client4.DeleteReaction",
                "Client4.DeleteRemoteCluster",
                "Client4.DeleteSamlIdpCertificate",
                "Client4.DeleteSamlPrivateCertificate",
                "Client4.DeleteSamlPublicCertificate",
                "Client4.DeleteScheduledPost",
                "Client4.DeleteScheme",
                "Client4.DeleteSidebarCategoryForTeamForUser",
                "Client4.DeleteUser",
                "Client4.DemoteUserToGuest",
                "Client4.DetachPlugin",
                "Client4.DisableBot",
                "Client4.DisablePlugin",
                "Client4.DisableUserAccessToken",
                "Client4.DoAPIRequestWithHeaders",
                "Client4.DoPostAction",
                "Client4.DoPostActionWithCookie",
                "Client4.DownloadComplianceExport",
                "Client4.DownloadComplianceReport",
                "Client4.DownloadExport",
                "Client4.DownloadFile",
                "Client4.DownloadFilePreview",
                "Client4.DownloadFileThumbnail",
                "Client4.DownloadJob",
                "Client4.DownloadLogs",
                "Client4.EnableBot",
                "Client4.EnablePlugin",
                "Client4.EnableUserAccessToken",
                "Client4.ExecuteCommand",
                "Client4.ExecuteCommandWithTeam",
                "Client4.FlagPostForContentReview",
                "Client4.GenerateMfaSecret",
                "Client4.GeneratePresignedURL",
                "Client4.GenerateRemoteClusterInvite",
                "Client4.GenerateSupportPacket",
                "Client4.GetAccessControlPolicy",
                "Client4.GetActiveUsersInTeam",
                "Client4.GetAllChannels",
                "Client4.GetAllChannelsExcludePolicyConstrained",
                "Client4.GetAllChannelsIncludeDeleted",
                "Client4.GetAllChannelsWithCount",
                "Client4.GetAllRoles",
                "Client4.GetAllSharedChannels",
                "Client4.GetAllTeams",
                "Client4.GetAllTeamsExcludePolicyConstrained",
                "Client4.GetAllTeamsWithTotalCount",
                "Client4.GetAnalyticsOld",
                "Client4.GetAncillaryPermissions",
                "Client4.GetAppliedSchemaMigrations",
                "Client4.GetAudits",
                "Client4.GetAuthorizedOAuthAppsForUser",
                "Client4.GetBot",
                "Client4.GetBotIncludeDeleted",
                "Client4.GetBots",
                "Client4.GetBotsIncludeDeleted",
                "Client4.GetBotsOrphaned",
                "Client4.GetBrandImage",
                "Client4.GetBulkReactions",
                "Client4.GetChannel",
                "Client4.GetChannelAsContentReviewer",
                "Client4.GetChannelByName",
                "Client4.GetChannelByNameForTeamName",
                "Client4.GetChannelByNameForTeamNameIncludeDeleted",
                "Client4.GetChannelByNameIncludeDeleted",
                "Client4.GetChannelMember",
                "Client4.GetChannelMemberCountsByGroup",
                "Client4.GetChannelMembers",
                "Client4.GetChannelMembersByIds",
                "Client4.GetChannelMembersForUser",
                "Client4.GetChannelMembersTimezones",
                "Client4.GetChannelMembersWithTeamData",
                "Client4.GetChannelModerations",
                "Client4.GetChannelPoliciesForUser",
                "Client4.GetChannelStats",
                "Client4.GetChannelUnread",
                "Client4.GetChannelsForAccessControlPolicy",
                "Client4.GetChannelsForRetentionPolicy",
                "Client4.GetChannelsForScheme",
                "Client4.GetChannelsForTeamAndUserWithLastDeleteAt",
                "Client4.GetChannelsForTeamForUser",
                "Client4.GetChannelsForUserWithLastDeleteAt",
                "Client4.GetChannelsMemberCount",
                "Client4.GetClientConfig",
                "Client4.GetCloudCustomer",
                "Client4.GetCloudProducts",
                "Client4.GetClusterStatus",
                "Client4.GetCommandById",
                "Client4.GetComplianceReport",
                "Client4.GetComplianceReports",
                "Client4.GetConfig",
                "Client4.GetConfigWithOptions",
                "Client4.GetContentFlaggedPost",
                "Client4.GetContentFlaggingSettings",
                "Client4.GetDataRetentionPolicies",
                "Client4.GetDataRetentionPoliciesCount",
                "Client4.GetDataRetentionPolicy",
                "Client4.GetDataRetentionPolicyByID",
                "Client4.GetDefaultProfileImage",
                "Client4.GetDeletedChannelsForTeam",
                "Client4.GetDrafts",
                "Client4.GetEditHistoryForPost",
                "Client4.GetEmoji",
                "Client4.GetEmojiByName",
                "Client4.GetEmojiImage",
                "Client4.GetEmojiList",
                "Client4.GetEmojisByNames",
                "Client4.GetEnvironmentConfig",
                "Client4.GetFile",
                "Client4.GetFileInfo",
                "Client4.GetFileInfosForPost",
                "Client4.GetFileInfosForPostIncludeDeleted",
                "Client4.GetFileLink",
                "Client4.GetFilePreview",
                "Client4.GetFileThumbnail",
                "Client4.GetFilteredUsersStats",
                "Client4.GetFlaggedPostsForUser",
                "Client4.GetFlaggedPostsForUserInChannel",
                "Client4.GetFlaggedPostsForUserInTeam",
                "Client4.GetFlaggingConfiguration",
                "Client4.GetGroup",
                "Client4.GetGroupMembers",
                "Client4.GetGroupStats",
                "Client4.GetGroupSyncable",
                "Client4.GetGroupSyncables",
                "Client4.GetGroups",
                "Client4.GetGroupsAssociatedToChannelsByTeam",
                "Client4.GetGroupsByChannel",
                "Client4.GetGroupsByNames",
                "Client4.GetGroupsByTeam",
                "Client4.GetGroupsByUserId",
                "Client4.GetIPFilters",
                "Client4.GetIncomingWebhook",
                "Client4.GetIncomingWebhooks",
                "Client4.GetIncomingWebhooksForTeam",
                "Client4.GetIncomingWebhooksWithCount",
                "Client4.GetInvoicesForSubscription",
                "Client4.GetJob",
                "Client4.GetJobs",
                "Client4.GetJobsByType",
                "Client4.GetKnownUsers",
                "Client4.GetLdapGroups",
                "Client4.GetLicenseLoadMetric",
                "Client4.GetLogs",
                "Client4.GetMarketplacePlugins",
                "Client4.GetMe",
                "Client4.GetMyIP",
                "Client4.GetNewUsersInTeam",
                "Client4.GetNotices",
                "Client4.GetOAuthApp",
                "Client4.GetOAuthAppInfo",
                "Client4.GetOAuthApps",
                "Client4.GetOldClientLicense",
                "Client4.GetOutgoingOAuthConnection",
                "Client4.GetOutgoingOAuthConnections",
                "Client4.GetOutgoingWebhook",
                "Client4.GetOutgoingWebhooks",
                "Client4.GetOutgoingWebhooksForChannel",
                "Client4.GetOutgoingWebhooksForTeam",
                "Client4.GetPing",
                "Client4.GetPingWithFullServerStatus",
                "Client4.GetPingWithOptions",
                "Client4.GetPingWithServerStatus",
                "Client4.GetPinnedPosts",
                "Client4.GetPluginStatuses",
                "Client4.GetPlugins",
                "Client4.GetPost",
                "Client4.GetPostIncludeDeleted",
                "Client4.GetPostInfo",
                "Client4.GetPostPropertyValues",
                "Client4.GetPostThread",
                "Client4.GetPostThreadWithOpts",
                "Client4.GetPostsAfter",
                "Client4.GetPostsAroundLastUnread",
                "Client4.GetPostsBefore",
                "Client4.GetPostsByIds",
                "Client4.GetPostsForChannel",
                "Client4.GetPostsSince",
                "Client4.GetPostsUsage",
                "Client4.GetPreferenceByCategoryAndName",
                "Client4.GetPreferences",
                "Client4.GetPreferencesByCategory",
                "Client4.GetPrivateChannelsForTeam",
                "Client4.GetProductLimits",
                "Client4.GetProfileImage",
                "Client4.GetPublicChannelsByIdsForTeam",
                "Client4.GetPublicChannelsForTeam",
                "Client4.GetReactions",
                "Client4.GetRecentlyActiveUsersInTeam",
                "Client4.GetRedirectLocation",
                "Client4.GetRemoteCluster",
                "Client4.GetRemoteClusterInfo",
                "Client4.GetRemoteClusters",
                "Client4.GetRole",
                "Client4.GetRoleByName",
                "Client4.GetRolesByNames",
                "Client4.GetSamlCertificateStatus",
                "Client4.GetSamlMetadata",
                "Client4.GetSamlMetadataFromIdp",
                "Client4.GetScheme",
                "Client4.GetSchemes",
                "Client4.GetSelfHostedProducts",
                "Client4.GetServerBusy",
                "Client4.GetServerLimits",
                "Client4.GetSessions",
                "Client4.GetSharedChannelRemotesByRemoteCluster",
                "Client4.GetSidebarCategoriesForTeamForUser",
                "Client4.GetSidebarCategoryForTeamForUser",
                "Client4.GetSidebarCategoryOrderForTeamForUser",
                "Client4.GetSortedEmojiList",
                "Client4.GetStorageUsage",
                "Client4.GetSubscription",
                "Client4.GetSupportedTimezone",
                "Client4.GetTeam",
                "Client4.GetTeamAsContentReviewer",
                "Client4.GetTeamByName",
                "Client4.GetTeamIcon",
                "Client4.GetTeamInviteInfo",
                "Client4.GetTeamMember",
                "Client4.GetTeamMembers",
                "Client4.GetTeamMembersByIds",
                "Client4.GetTeamMembersForUser",
                "Client4.GetTeamMembersSortAndWithoutDeletedUsers",
                "Client4.GetTeamPoliciesForUser",
                "Client4.GetTeamPostFlaggingFeatureStatus",
                "Client4.GetTeamStats",
                "Client4.GetTeamUnread",
                "Client4.GetTeamsForRetentionPolicy",
                "Client4.GetTeamsForScheme",
                "Client4.GetTeamsForUser",
                "Client4.GetTeamsUnreadForUser",
                "Client4.GetTeamsUsage",
                "Client4.GetTermsOfService",
                "Client4.GetTotalUsersStats",
                "Client4.GetUpload",
                "Client4.GetUploadsForUser",
                "Client4.GetUser",
                "Client4.GetUserAccessToken",
                "Client4.GetUserAccessTokens",
                "Client4.GetUserAccessTokensForUser",
                "Client4.GetUserAudits",
                "Client4.GetUserByEmail",
                "Client4.GetUserByUsername",
                "Client4.GetUserScheduledPosts",
                "Client4.GetUserStatus",
                "Client4.GetUserTermsOfService",
                "Client4.GetUserThread",
                "Client4.GetUserThreads",
                "Client4.GetUsers",
                "Client4.GetUsersByGroupChannelIds",
                "Client4.GetUsersByIds",
                "Client4.GetUsersByIdsWithOptions",
                "Client4.GetUsersByUsernames",
                "Client4.GetUsersForReporting",
                "Client4.GetUsersInChannel",
                "Client4.GetUsersInChannelByStatus",
                "Client4.GetUsersInGroup",
                "Client4.GetUsersInGroupByDisplayName",
                "Client4.GetUsersInTeam",
                "Client4.GetUsersNotInChannel",
                "Client4.GetUsersNotInChannelWithOptions",
                "Client4.GetUsersNotInTeam",
                "Client4.GetUsersStatusesByIds",
                "Client4.GetUsersWithCustomQueryParameters",
                "Client4.GetUsersWithInvalidEmails",
                "Client4.GetUsersWithoutTeam",
                "Client4.GetWebappPlugins",
                "Client4.ImportTeam",
                "Client4.InstallMarketplacePlugin",
                "Client4.InstallPluginFromURL",
                "Client4.InvalidateCaches",
                "Client4.InvalidateEmailInvites",
                "Client4.InviteGuestsToTeam",
                "Client4.InviteGuestsToTeamGracefully",
                "Client4.InviteRemoteClusterToChannel",
                "Client4.InviteUsersToTeam",
                "Client4.InviteUsersToTeamAndChannelsGracefully",
                "Client4.InviteUsersToTeamGracefully",
                "Client4.LinkGroupSyncable",
                "Client4.LinkLdapGroup",
                "Client4.ListAutocompleteCommands",
                "Client4.ListCPAFields",
                "Client4.ListCPAValues",
                "Client4.ListChannelBookmarksForChannel",
                "Client4.ListCommandAutocompleteSuggestions",
                "Client4.ListCommands",
                "Client4.ListExports",
                "Client4.ListImports",
                "Client4.Login",
                "Client4.LoginById",
                "Client4.LoginByLdap",
                "Client4.LoginWithDesktopToken",
                "Client4.LoginWithDevice",
                "Client4.LoginWithMFA",
                "Client4.Logout",
                "Client4.LookupInteractiveDialog",
                "Client4.MarkNoticesViewed",
                "Client4.MigrateAuthToLdap",
                "Client4.MigrateAuthToSaml",
                "Client4.MigrateConfig",
                "Client4.MigrateIdLdap",
                "Client4.MoveChannel",
                "Client4.MoveCommand",
                "Client4.MoveThread",
                "Client4.NotifyAdmin",
                "Client4.OpenInteractiveDialog",
                "Client4.PatchBot",
                "Client4.PatchCPAField",
                "Client4.PatchCPAValues",
                "Client4.PatchCPAValuesForUser",
                "Client4.PatchChannel",
                "Client4.PatchChannelModerations",
                "Client4.PatchConfig",
                "Client4.PatchDataRetentionPolicy",
                "Client4.PatchGroup",
                "Client4.PatchGroupSyncable",
                "Client4.PatchPost",
                "Client4.PatchRemoteCluster",
                "Client4.PatchRole",
                "Client4.PatchScheme",
                "Client4.PatchTeam",
                "Client4.PatchUser",
                "Client4.PermanentDeleteAllUsers",
                "Client4.PermanentDeleteChannel",
                "Client4.PermanentDeletePost",
                "Client4.PermanentDeleteTeam",
                "Client4.PermanentDeleteUser",
                "Client4.PinPost",
                "Client4.PostLog",
                "Client4.PromoteGuestToUser",
                "Client4.PublishUserTyping",
                "Client4.PurgeElasticsearchIndexes",
                "Client4.ReadMultipleChannels",
                "Client4.ReattachPlugin",
                "Client4.RegenCommandToken",
                "Client4.RegenOutgoingHookToken",
                "Client4.RegenerateOAuthAppSecret",
                "Client4.RegenerateTeamInviteId",
                "Client4.RegisterTermsOfServiceAction",
                "Client4.ReloadConfig",
                "Client4.RemoteClusterAcceptInvite",
                "Client4.RemoveChannelsFromRetentionPolicy",
                "Client4.RemoveLicenseFile",
                "Client4.RemovePlugin",
                "Client4.RemoveRecentUserCustomStatus",
                "Client4.RemoveTeamIcon",
                "Client4.RemoveTeamMember",
                "Client4.RemoveTeamsFromRetentionPolicy",
                "Client4.RemoveUserCustomStatus",
                "Client4.RemoveUserFromChannel",
                "Client4.RequestTrialLicense",
                "Client4.RequestTrialLicenseWithExtraFields",
                "Client4.ResetFailedAttempts",
                "Client4.ResetPassword",
                "Client4.ResetSamlAuthDataToEmail",
                "Client4.RestoreChannel",
                "Client4.RestoreGroup",
                "Client4.RestorePostVersion",
                "Client4.RestoreTeam",
                "Client4.RevokeAllSessions",
                "Client4.RevokeSession",
                "Client4.RevokeSessionsFromAllUsers",
                "Client4.RevokeUserAccessToken",
                "Client4.SaveContentFlaggingSettings",
                "Client4.SaveReaction",
                "Client4.SearchAccessControlPolicies",
                "Client4.SearchAllChannels",
                "Client4.SearchAllChannelsForUser",
                "Client4.SearchAllChannelsPaged",
                "Client4.SearchChannels",
                "Client4.SearchChannelsForAccessControlPolicy",
                "Client4.SearchChannelsForRetentionPolicy",
                "Client4.SearchContentFlaggingReviewers",
                "Client4.SearchEmoji",
                "Client4.SearchFiles",
                "Client4.SearchFilesAcrossTeams",
                "Client4.SearchFilesWithParams",
                "Client4.SearchGroupChannels",
                "Client4.SearchPosts",
                "Client4.SearchPostsWithMatches",
                "Client4.SearchPostsWithParams",
                "Client4.SearchTeams",
                "Client4.SearchTeamsForRetentionPolicy",
                "Client4.SearchTeamsPaged",
                "Client4.SearchUserAccessTokens",
                "Client4.SearchUsers",
                "Client4.SendPasswordResetEmail",
                "Client4.SendVerificationEmail",
                "Client4.SetDefaultProfileImage",
                "Client4.SetPostReminder",
                "Client4.SetPostUnread",
                "Client4.SetProfileImage",
                "Client4.SetServerBusy",
                "Client4.SetTeamIcon",
                "Client4.SetThreadUnreadByPostId",
                "Client4.SoftDeleteTeam",
                "Client4.SubmitClientMetrics",
                "Client4.SubmitInteractiveDialog",
                "Client4.SwitchAccountType",
                "Client4.SyncLdap",
                "Client4.TeamExists",
                "Client4.TeamMembersMinusGroupMembers",
                "Client4.TestElasticsearch",
                "Client4.TestEmail",
                "Client4.TestExpression",
                "Client4.TestLdap",
                "Client4.TestNotifications",
                "Client4.TestS3Connection",
                "Client4.TestSiteURL",
                "Client4.TriggerNotifyAdmin",
                "Client4.UnacknowledgePost",
                "Client4.UnassignAccessControlPolicies",
                "Client4.UninviteRemoteClusterToChannel",
                "Client4.UnlinkGroupSyncable",
                "Client4.UnlinkLdapGroup",
                "Client4.UnpinPost",
                "Client4.UpdateChannel",
                "Client4.UpdateChannelBookmark",
                "Client4.UpdateChannelBookmarkSortOrder",
                "Client4.UpdateChannelMemberSchemeRoles",
                "Client4.UpdateChannelNotifyProps",
                "Client4.UpdateChannelPrivacy",
                "Client4.UpdateChannelRoles",
                "Client4.UpdateChannelScheme",
                "Client4.UpdateCloudCustomer",
                "Client4.UpdateCloudCustomerAddress",
                "Client4.UpdateCommand",
                "Client4.UpdateConfig",
                "Client4.UpdateIncomingWebhook",
                "Client4.UpdateJobStatus",
                "Client4.UpdateOAuthApp",
                "Client4.UpdateOutgoingOAuthConnection",
                "Client4.UpdateOutgoingWebhook",
                "Client4.UpdatePassword",
                "Client4.UpdatePost",
                "Client4.UpdatePreferences",
                "Client4.UpdateScheduledPost",
                "Client4.UpdateSidebarCategoriesForTeamForUser",
                "Client4.UpdateSidebarCategoryForTeamForUser",
                "Client4.UpdateSidebarCategoryOrderForTeamForUser",
                "Client4.UpdateTeam",
                "Client4.UpdateTeamMemberRoles",
                "Client4.UpdateTeamMemberSchemeRoles",
                "Client4.UpdateTeamPrivacy",
                "Client4.UpdateTeamScheme",
                "Client4.UpdateThreadFollowForUser",
                "Client4.UpdateThreadReadForUser",
                "Client4.UpdateThreadsReadForUser",
                "Client4.UpdateUser",
                "Client4.UpdateUserActive",
                "Client4.UpdateUserAuth",
                "Client4.UpdateUserCustomStatus",
                "Client4.UpdateUserHashedPassword",
                "Client4.UpdateUserMfa",
                "Client4.UpdateUserPassword",
                "Client4.UpdateUserRoles",
                "Client4.UpdateUserStatus",
                "Client4.UploadBrandImage",
                "Client4.UploadData",
                "Client4.UploadFile",
                "Client4.UploadFileAsRequestBody",
                "Client4.UploadLdapPrivateCertificate",
                "Client4.UploadLdapPublicCertificate",
                "Client4.UploadLicenseFile",
                "Client4.UploadPlugin",
                "Client4.UploadPluginForced",
                "Client4.UploadSamlIdpCertificate",
                "Client4.UploadSamlPrivateCertificate",
                "Client4.UploadSamlPublicCertificate",
                "Client4.UpsertDraft",
                "Client4.UpsertGroupMembers",
                "Client4.ValidateBusinessEmail",
                "Client4.ValidateWorkspaceBusinessEmail",
                "Client4.VerifyUserEmail",
                "Client4.VerifyUserEmailWithoutToken",
                "Client4.ViewChannel",
                "Client4.accessControlPoliciesRoute",
                "Client4.accessControlPolicyRoute",
                "Client4.analyticsRoute",
                "Client4.bookmarkRoute",
                "Client4.bookmarksRoute",
                "Client4.botRoute",
                "Client4.botsRoute",
                "Client4.brandRoute",
                "Client4.cacheRoute",
                "Client4.celRoute",
                "Client4.channelByNameForTeamNameRoute",
                "Client4.channelByNameRoute",
                "Client4.channelMemberRoute",
                "Client4.channelMembersRoute",
                "Client4.channelRemoteRoute",
                "Client4.channelRoute",
                "Client4.channelSchemeRoute",
                "Client4.channelsForTeamForUserRoute",
                "Client4.channelsForTeamRoute",
                "Client4.channelsRoute",
                "Client4.clientPerfMetricsRoute",
                "Client4.cloudRoute",
                "Client4.clusterRoute",
                "Client4.commandMoveRoute",
                "Client4.commandRoute",
                "Client4.commandsRoute",
                "Client4.complianceReportDownloadRoute",
                "Client4.complianceReportRoute",
                "Client4.complianceReportsRoute",
                "Client4.configRoute",
                "Client4.contentFlaggingRoute",
                "Client4.customProfileAttributeFieldRoute",
                "Client4.customProfileAttributeFieldsRoute",
                "Client4.customProfileAttributeValuesRoute",
                "Client4.customProfileAttributesRoute",
                "Client4.dataRetentionPolicyRoute",
                "Client4.dataRetentionRoute",
                "Client4.databaseRoute",
                "Client4.draftsRoute",
                "Client4.elasticsearchRoute",
                "Client4.emojiByNameRoute",
                "Client4.emojiRoute",
                "Client4.emojisRoute",
                "Client4.exportRoute",
                "Client4.exportsRoute",
                "Client4.fileRoute",
                "Client4.filesRoute",
                "Client4.getAllChannels",
                "Client4.groupRoute",
                "Client4.groupSyncableRoute",
                "Client4.groupSyncablesRoute",
                "Client4.groupsRoute",
                "Client4.importRoute",
                "Client4.importsRoute",
                "Client4.incomingWebhookRoute",
                "Client4.incomingWebhooksRoute",
                "Client4.ipFiltersRoute",
                "Client4.jobsRoute",
                "Client4.ldapRoute",
                "Client4.licenseRoute",
                "Client4.limitsRoute",
                "Client4.login",
                "Client4.oAuthAppRoute",
                "Client4.oAuthAppsRoute",
                "Client4.outgoingOAuthConnectionRoute",
                "Client4.outgoingOAuthConnectionsRoute",
                "Client4.outgoingWebhookRoute",
                "Client4.outgoingWebhooksRoute",
                "Client4.permissionsRoute",
                "Client4.pluginRoute",
                "Client4.pluginsRoute",
                "Client4.postRoute",
                "Client4.postsEphemeralRoute",
                "Client4.postsRoute",
                "Client4.preferencesRoute",
                "Client4.publishUserTypingRoute",
                "Client4.reactionsRoute",
                "Client4.redirectLocationRoute",
                "Client4.remoteClusterRoute",
                "Client4.reportsRoute",
                "Client4.rolesRoute",
                "Client4.samlRoute",
                "Client4.schemeRoute",
                "Client4.schemesRoute",
                "Client4.serverBusyRoute",
                "Client4.sharedChannelRemotesRoute",
                "Client4.sharedChannelsRoute",
                "Client4.systemRoute",
                "Client4.teamAutoCompleteCommandsRoute",
                "Client4.teamByNameRoute",
                "Client4.teamImportRoute",
                "Client4.teamMemberRoute",
                "Client4.teamMembersRoute",
                "Client4.teamRoute",
                "Client4.teamSchemeRoute",
                "Client4.teamStatsRoute",
                "Client4.teamsRoute",
                "Client4.termsOfServiceRoute",
                "Client4.testEmailRoute",
                "Client4.testNotificationRoute",
                "Client4.testS3Route",
                "Client4.testSiteURLRoute",
                "Client4.timezonesRoute",
                "Client4.totalUsersStatsRoute",
                "Client4.uploadPlugin",
                "Client4.uploadRoute",
                "Client4.uploadsRoute",
                "Client4.usageRoute",
                "Client4.userAccessTokenRoute",
                "Client4.userAccessTokensRoute",
                "Client4.userByEmailRoute",
                "Client4.userByUsernameRoute",
                "Client4.userCategoryRoute",
                "Client4.userCustomProfileAttributesRoute",
                "Client4.userRoute",
                "Client4.userStatusRoute",
                "Client4.userStatusesRoute",
                "Client4.userTermsOfServiceRoute",
                "Client4.userThreadRoute",
                "Client4.userThreadsRoute",
                "Client4.usersRoute",
                "MarketplacePluginFilter.ApplyToURL"
            ]
        }
    ]
}

Database specific

source
"https://vuln.go.dev/ID/GO-2026-6910.json"