Sploitus

22 exploited vulnerabilities in Zulip

Vulnerabilities with publicly known exploits

Vendors
Zulip, Stripe, Unknown
With known exploits
22
Affected Zulip versions
< 4.10, 4.8, 6.2, 4.7, 11.5, 4.11, 8.3, 11.6, 10.3, 5.3
Affected Zulip Zulip Server versions
< 10.2, 8.3, 10.0, 11.5, 2023-01-09, 6.2, 8.1, 7.5

Vulnerabilities with exploits

Highest CVSS first — each links to the exploits we have indexed

CVE-2021-3967
CVSS 8.8 HIGH 2022-02-26FIX AVAILABLE
CVE-2025-31478
CVSS 8.2 HIGH 2025-04-16FIX AVAILABLE
CVE-2024-36612
CVSS 7.5 HIGH 2024-11-29FIX AVAILABLE
CVE-2026-25741
CVSS 7.1 HIGH 2026-02-26FIX AVAILABLE
CVE-2021-3866
CVSS 6.8 MEDIUM 2022-01-20FIX AVAILABLE
CVE-2026-40300
CVSS 6.5 MEDIUM 2026-05-12FIX AVAILABLE
CVE-2024-27286
CVSS 6.5 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2023-28623
CVSS 6.5 MEDIUM 2023-05-19FIX AVAILABLE
CVE-2021-41115
CVSS 6.5 MEDIUM 2021-10-07FIX AVAILABLE
CVE-2026-26058
CVSS 6.1 MEDIUM 2026-04-03FIX AVAILABLE
CVE-2022-24751
CVSS 5.8 MEDIUM 2022-03-16FIX AVAILABLE
CVE-2026-24050
CVSS 5.4 MEDIUM 2026-02-06FIX AVAILABLE
CVE-2024-36625
CVSS 5.4 MEDIUM 2024-11-29
CVE-2024-36624
CVSS 5.4 MEDIUM 2024-11-29
CVE-2026-25742
CVSS 5.3 MEDIUM 2026-04-03FIX AVAILABLE
CVE-2025-47930
CVSS 5.3 MEDIUM 2025-05-15FIX AVAILABLE
CVE-2025-27149
CVSS 4.6 MEDIUM 2025-03-31FIX AVAILABLE
CVE-2023-22735
CVSS 4.4 MEDIUM 2023-02-07FIX AVAILABLE
CVE-2025-25195
CVSS 4.3 MEDIUM 2025-02-13
CVE-2024-21630
CVSS 4.3 MEDIUM 2024-01-25FIX AVAILABLE
CVE-2023-47642
CVSS 4.3 MEDIUM 2023-11-16FIX AVAILABLE
CVE-2022-31017
CVSS 2.1 LOW 2022-06-25FIX AVAILABLE