Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Zulip CVE-2026-115574
Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-public channels enabled exposed the GET /json/users endpoint to lo
14 CVEs and 14 credit lines. None claimed yet.
0 of 14 credit lines claimed Claim credit -
Zulip CVE-2026-115474
Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the Who can view all other users in the organization setting restri
14 CVEs and 14 credit lines. None claimed yet.
0 of 14 credit lines claimed Claim credit -
Zulip CVE-2026-97701
Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, the authenticated POST /messages/render endpoint renders the content par
14 CVEs and 14 credit lines. None claimed yet.
0 of 14 credit lines claimed Claim credit