Skip to content
OpenAdvisories

Product · element-hq

element-call

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-48007

    Element Call reports full URLs of visited pages to analytics server

    Element Call is a native Matrix video conferencing application. Versions 0.5.17 through 0.19.3 report analytics data to a PostHog server, when configured to by a `posthog` key in config.json or by the `posthogApiHost` and `posthogApiKey` URL parameters. Sever…

    element-hq element-call @element-hq/element-call-embedded npm