Zulip
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 65 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 28, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Zulip: Guests can read new messages in non-subscribed public channels
Zulip: OpenID Connect authentication ignores the email_verified claim
Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/history
Zulip: Path Traversal in Import
Zulip: Anonymous File Access After Disabling Spectator Access
Zulip affected by Stored XSS in user profile modal
Zulip XSS in digest preview URL
Zulip Server has access control bypass for restrictions on creation of specific channel types
Zulip Authentication Backend Configuration Bypass
Zulip allows the deletion of Custom profile fields by administrators of a different organization
Monitor Zulip in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.