Medium severity6.1OSV Advisory· Published Apr 18, 2018· Updated Jun 17, 2026
CVE-2018-9990
CVE-2018-9990
Description
In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <1.7.2
Patches
Vulnerability mechanics
References
1- blog.zulip.org/2018/04/12/zulip-1-7-2-released/nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.