In Zulip Server versions 1.5.x, 1.6.x, and 1.7.x before 1.7.2, there was an XSS issue with muting notifications.
{ "versions": [ { "introduced": "1.5.0" }, { "fixed": "1.7.2" } ] }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-9987.json"