Login Request a demo
ZU
Product
zulip
by zulip · last CVE Oct 14, 2026
42
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities42In the news0Timeline
Severity mix
Critical 3High 7Medium 25Low 7
Severity
All severities42Critical3High7Medium25Low7
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add zulip to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-28623
3.7
1%
May 19
Unauthorized user can register an account in specific configurations in Zulip
Affected: >= 2.1.0, < 6.2
CVE-2022-41914
3.7
1%
Nov 16
Non-constant-time SCIM token comparison in Zulip Server
Affected: >= 5.0, < 5.7
CVE-2023-32677
3.1
1%
May 19
Users who can send invitations can erroneously add users to streams during invitation in Zulip
Affected: > 1.9.0, < 6.2
CVE-2025-30369
2.7
0%
Mar 31
Zulip allows the deletion of Custom profile fields by administrators of a different organization
Affected: >= 1.6.0, < 10.1
CVE-2025-30368
2.7
0%
Mar 31
Zulip allows the deletion of organization by administrators of a different organization
Affected: >= 10.0-beta1, < 10.1
CVE-2025-27149
2.7
0%
Mar 31
Zulip exports can leak private data
Affected: >= 2.1.0, < 10.0
CVE-2022-31017
2.6
1%
Jun 25
Expression Always True vulnerability in Zulip Server
Affected: >= 2.1.0, < 5.3
Showing 7