Memory Leak Vulnerability in Zulip Affected Versions 8.0 to 8.3

CVE-2024-36612

What is CVE-2024-36612?

Zulip versions 8.0 through 8.3 are susceptible to a memory leak vulnerability due to improper handling of popover functionality. This issue may allow excessive memory consumption, potentially leading to performance degradation or outages. Users and administrators are advised to assess their current deployments and apply available updates to mitigate the risk. Detailed insights into the affected code can be found in the project's commit history and specific source files.

References