PT-2026-27617

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.15 NATS-Server versions prior to 2.12.6 Description NATS-Server, a high-performance server for NATS.io, contains an issue where users with JetStream admin API access to restore one stream could restore to oth...

CVE-2018-9990

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...

CVE-2018-9990

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...

Cross site scripting

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...

CVE-2018-9990

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...

CVE-2018-9990

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...

CVE-2018-9990: Improper Neutralization of Input During Web Page Generation

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead...

PT-2018-19153

Name of the Vulnerable Software and Affected Versions Zulip Server versions prior to 1.7.2 Description The issue is related to an XSS problem with stream names in topic typeahead. Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue...