Approved changes feed: RSS · Atom

cpe:2.3:a:zulip:zulip_desktop:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZulip (ebb0f23a-bdd7-5b5e-8416-5fa4568be6a4)
ProductZulip Desktop (2fe4ed89-aac4-5fba-a0c8-a2a9f39d1f3b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zulip/zulip-desktop purl2cpe 2026-06-01 10:11:52.617375

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10858 vulnerable 2026-06-08 05:16:35.970969 Details available
Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler.
Published: 2021-02-05T19:14:23.000Z
Updated: 2024-08-04T11:14:15.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10857 vulnerable 2026-06-08 05:16:35.970571 Details available
Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.
Published: 2021-02-05T19:16:26.000Z
Updated: 2024-08-04T11:14:15.670Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.