Skip to content
Jitsi vulnerabilities
Newest
-
jitsi @jitsi/electron-sdk
@jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture
CVE-2026-92299
7.1 High
-
jitsi jitsi-meet
Jitsi Meet has DOM Redirect on Microsoft OAuth Flow
CVE-2025-64754
2.7 Low
-
8x8 jitsi meet, jitsi meet +1 more
In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an...
CVE-2024-44081
9.8 Critical
-
8x8 jitsi meet, jitsi meet +1 more
In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in...
CVE-2024-44080
7.5 High
-
jitsi meet
In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a...
CVE-2024-33530
7.5 High
-
jitsi
A command injection vulnerability exists in Jitsi before commit...
CVE-2022-43550
9.8 Critical
-
jitsi
** DISPUTED ** Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which...
CVE-2022-36736
Disputed
6.1 Medium
-
8x8 jitsi meet, jitsi jitsi-meet +1 more
Authentication Bypass: Forged Tokens Allow Access to Arbitrary Rooms
CVE-2021-39215
7.5 High
-
8x8 jitsi meet, jitsi jitsi-meet +1 more
DOM-based XSS/Content Spoofing via Prototype Pollution
CVE-2021-39205
6.8 Medium
-
jitsi meet
Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the ...
CVE-2021-26812
EPSS 97.2%
6.1 Medium
-
jitsi meet electron
jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal...
CVE-2020-25019
7.5 High
-
jitsi meet
The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default...
CVE-2020-11878
9.8 Critical
-
jitsi
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...
CVE-2017-5603
Fix available
5.9 Medium