Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-36625
5.4
MEDIUMCVSS v3
Published
November 29, 2024
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the replace_emoji_with_text function in ui_util.ts.
zulip/zulip
GitHubZulip server and web application. Open-source team chat that helps teams stay productive and focused.
GitHubZulip server and web application. Open-source team chat that helps teams stay productive and focused.= 8.3NVD
Crates.io
zulip
Python Package Index
NPM
RubyGems