JI
Vendor
Jitsi
11
CVEs
0
On KEV
0
New 30D
Products
ME9.8
Meet
Jitsi
5 CVEs0 on KEV0 new
JI9.8
Jitsi
Jitsi
3 CVEs0 on KEV0 new
JI7.4
@jitsi/electron-sdk
Jitsi
1 CVEs0 on KEV0 new
JI2.7
jitsi-meet
jitsi
1 CVEs0 on KEV0 new
ME7.5
Meet Electron
Jitsi
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-92299 | JI @jitsi/electron-sdk Jitsi | 7.4 | Sep 16 | @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture |
| CVE-2025-64754 | JI jitsi-meet jitsi | 2.7 | Nov 13 | Jitsi Meet has DOM Redirect on Microsoft OAuth Flow |
| CVE-2024-44081 | ME Meet Jitsi | 9.8 | Oct 29 | In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message… |
| CVE-2024-44080 | ME Meet Jitsi | 7.5 | Oct 29 | In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a… |
| CVE-2024-33530 | ME Meet Jitsi | 7.5 | May 2 | In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the disclosure of the meeting password when a user is invited to a… |
| CVE-2022-43550 | JI Jitsi Jitsi | 9.8 | Feb 9 | A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert… |
| CVE-2022-36736 | JI Jitsi Jitsi | 6.1 | Sep 8 | Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request |
| CVE-2021-26812 | ME Meet Jitsi | 6.1 | Apr 14 | Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module |
| CVE-2020-25019 | ME Meet Electron Jitsi | 7.5 | Aug 29 | jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some… |
| CVE-2020-11878 | ME Meet Jitsi | 9.8 | Apr 17 | The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) for system accounts |
| CVE-2017-5603 | JI Jitsi Jitsi | 5.9 | Feb 9 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable… |