Skip to content
OpenAdvisories

Vendor

Jitsi

4 known vulnerabilities.

Products

jitsi-meet 3 @jitsi/electron-sdk 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2026-92299

    @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture

    @jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sou…

    Jitsi @jitsi/electron-sdk
  • High 7.5
    CVE-2021-39215

    Authentication Bypass: Forged Tokens Allow Access to Arbitrary Rooms

    Jitsi Meet is an open source video conferencing application. In versions prior to 2.0.5963, a Prosody module allows the use of symmetrical algorithms to validate JSON web tokens. This means that tokens generated by arbitrary sources can be used to gain author…

    Jitsi jitsi-meet