zulip@0.1.0 vulnerabilities

Zulip API client library

Direct Vulnerabilities

Known vulnerabilities in the zulip package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Cross-site Scripting (XSS)

zulip is a Zulip API client library

Affected versions of this package are vulnerable to Cross-site Scripting (XSS). Zulip Desktop allows XSS due to string escaping being mishandled during composition of the HTML for the user interface.

How to fix Cross-site Scripting (XSS)?

Upgrade zulip to version 5.4.3 or higher.

<5.4.3