Login Request a demo
ZU
Product
zulip
by zulip · last CVE Oct 14, 2026
42
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities42In the news0Timeline
Severity mix
Critical 3High 7Medium 25Low 7
Severity
All severities42Critical3High7Medium25Low7
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add zulip to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-31168
8.8
1%
Jul 22
Zulip Server insufficient authorization for changing bot roles
Affected: < 5.5
CVE-2021-3967
8.8
1%
Feb 26
Improper Access Control in zulip/zulip
Affected: before 4.10
CVE-2025-31478
8.2
0%
Apr 16
Zulip Authentication Backend Configuration Bypass
Affected: < 10.2
CVE-2024-36612
7.5
1%
Nov 29
Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers
Affected: 8.0 through 8.3
CVE-2016-4427
7.5
1%
Jul 28
In zulip before 1.3.12, deactivated users could access messages if SSO was enabled
Affected: before 1.3.12
CVE-2022-24751
7.4
1%
Mar 16
Race condition in Zulip
Affected: >= 4.0, < 4.11
CVE-2026-25741
7.1
0%
Feb 26
Zulip Vulnerable to Modification of Payment Method (Stripe Default Card) by Non-Billing Users
Affected: < bf28c82dc9b1f630fa8e9106358771b20a0040f7
Showing 7