CVE-2026-97701 | Zulip up to 12.1 Markdown Rendering /messages/render content allocation of resources

November 4, 2026 Yanac

A vulnerability identified as problematic has been detected in Zulip up to 12.1. Affected by this vulnerability is an unknown functionality of the file /messages/render of the component Markdown Rendering. This manipulation of the argument content causes allocation of resources.

This vulnerability is tracked as CVE-2026-97701. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More