https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:42:54.896317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-35962 CVE-2022-35962 — Crafted link in Zulip message can cause disclosure of credentials 2026-10-08T14:42:54.898576+00:00

Affected: zulip-mobile

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190.