| Package | Affected versions | Patched versions |
|---|---|---|
| zulip server | < 2.0.5 | 2.0.5 |
The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing of future messages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free