CVE-2026-40300

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-40300
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40300.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-40300
Aliases
  • GHSA-jp8f-mvv6-89cr
Published
2026-05-12T16:33:02.829Z
Modified
2026-08-12T03:51:29.152562181Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/history
Details

Zulip is an open-source team collaboration tool. Prior to 12.0, With messageedithistoryvisibilitypolicy set to "moves", /api/v1/messages/{id}/history still returns historical content values, allowing low-privilege users to recover text that was edited away from other users' messages. This vulnerability is fixed in 12.0.

Database specific 
{
    "cwe_ids": [
        "CWE-284"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40300.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/zulip/zulip

Affected ranges

Type
GIT
Repo
https://github.com/zulip/zulip
Events
Introduced
df1abeb8ed5f51d6e93114385ec637af9325962f
Fixed
66114d404aeda6f3da1267469f3a5347acc8263a
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:zulip:zulip_server:10.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "12.0"
        },
        {
            "introduced": "10.0"
        },
        {
            "last_affected": "10.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

10.*
10.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40300.json"