| Package | Affected versions | Patched versions |
|---|---|---|
| zulip desktop | < 4.0.3 | 4.0.3 |
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free