zulip Vulnerability Advisory Catalog

Total 62 security vulnerabilities recorded for zulip software and firmware.

← Back to All Vendors
Component: zulip_server

Zulip is an open-source team collaboration tool. Prior to 12.0, With message_edit_history_visibility_policy set to "moves", /api/v1/messages/{id}/hist...

📅 2026-05-12
CVSS 6.5 Dossier →
Component: zulip

Zulip is an open-source team collaboration tool. From version 1.4.0 to before version 11.6, ./manage.py import reads arbitrary files from the server f...

📅 2026-04-03
CVSS 6.1 Dossier →
Component: zulip

Zulip is an open-source team collaboration tool. Prior to version 11.6, Zulip is an open-source team collaboration tool. From version 1.4.0 to before ...

📅 2026-04-03
CVSS 5.3 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profile were susceptible to stored X...

📅 2026-02-06
CVSS 5.4 Dossier →
Component: zulip_server

Zulip is an open-source team chat application. From versions 2.0.0-rc1 to before 10.4 in Zulip Server, the /digest/ URL of a server shows a preview of...

📅 2025-07-02
CVSS 6.8 Dossier →
Component: zulip

Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" access control...

📅 2025-05-16
CVSS 5.3 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely by being able to authenticate...

📅 2025-04-16
CVSS 8.2 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed to be restricted to organizatio...

📅 2025-03-31
CVSS 2.7 Dossier →
Component: zulip

Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrato...

📅 2025-03-31
CVSS 2.7 Dossier →
Component: zulip_server

Zulip server provides an open-source team chat that helps teams stay productive and focused. Prior to 10.0, the data export to organization administra...

📅 2025-03-31
CVSS 2.7 Dossier →
Component: zulip_server

Zulip server provides an open-source team chat that helps teams stay productive and focused. Zulip Server 7.0 and above are vulnerable to an informati...

📅 2025-01-16
CVSS 5.3 Dossier →
Component: zulip_server

Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers....

📅 2024-11-29
CVSS 7.5 Dossier →
Component: zulip

Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js....

📅 2024-11-29
CVSS 5.4 Dossier →
Component: zulip

Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace_emoji_with_text function in ui_util.ts....

📅 2024-11-29
CVSS 5.4 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool. When a user moves a Zulip message, they have the option to move all messages in the topic, move only ...

📅 2024-03-20
CVSS 6.5 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool. A vulnerability in version 8.0 is similar to CVE-2023-32677, but applies to multi-use invitations, no...

📅 2024-01-25
CVSS 4.3 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool. It was discovered by the Zulip development team that active users who had previously been subscribed ...

📅 2023-11-16
CVSS 4.3 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. Users who used to be subscribed to a private ...

📅 2023-08-25
CVSS 6.5 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool with unique topic-based threading that combines the best of email and chat to make remote work product...

📅 2023-05-30
CVSS 8.2 Dossier →
Component: zulip

Zulip is an open-source team collaboration tool with unique topic-based threading. In the event that 1: `ZulipLDAPAuthBackend` and an external authent...

📅 2023-05-19
CVSS 6.5 Dossier →
Component: zulip

Zulip is an open-source team collaboration tool with unique topic-based threading. Zulip administrators can configure Zulip to limit who can add users...

📅 2023-05-19
CVSS 3.1 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool. In versions of zulip prior to commit `2f6c5a8` but after commit `04cf68b` users could upload files wi...

📅 2023-02-07
CVSS 4.4 Dossier →
Component: zulip_server

Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity Management(SCIM) account management enabled, ...

📅 2022-11-16
CVSS 3.7 Dossier →
Component: zulip

Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. When displaying messages with embedded remote...

📅 2022-08-31
CVSS 4.3 Dossier →
Page 1 of 3 (62 Total Records)