Jitsi
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| jitsi-meet | 3 | – | Nov 13, 2025 |
| @jitsi/electron-sdk | 1 | – | Sep 16, 2026 |
Exploited and recent CVEs
- CVE-2026-92299 @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture 0.5%
- CVE-2025-64754 Jitsi Meet has DOM Redirect on Microsoft OAuth Flow 0.4%
- CVE-2021-39215 Authentication Bypass: Forged Tokens Allow Access to Arbitrary Rooms 1.2%
- CVE-2021-39205 DOM-based XSS/Content Spoofing via Prototype Pollution 1.2%