171 matches found
EUVD-2021-25586
Malware in sbrugna...
EUVD-2021-25592
Malware in sbrugna...
EUVD-2024-28358
Malicious code in bioql PyPI...
EUVD-2022-46547
Malicious code in bioql PyPI...
EUVD-2024-31267
Malicious code in bioql PyPI...
Malicious code in eslint-config-jitsi (npm)
The package eslint-config-jitsi was found to contain malicious code...
Malicious code in jitsi-meet-logger (npm)
The package jitsi-meet-logger was found to contain malicious code...
MAL-2025-19833 Malicious code in eslint-config-jitsi (npm)
The package eslint-config-jitsi was found to contain malicious code...
MAL-2025-23814 Malicious code in jitsi-meet-logger (npm)
The package jitsi-meet-logger was found to contain malicious code...
CVE-2024-30437
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL Webinar and Video Conference with Jitsi Meet allows Stored XSS.This issue affects Webinar and Video Conference with Jitsi Meet: from n/a through 2.6.3...
CVE-2024-33530
In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings that make use of a lobby leads to the disclosure of the meeting password when a user is invited to a call after waiting in the lobby...
CVE-2024-44081
In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...
CVE-2024-44080
In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...
MAL-2025-4364 Malicious code in jitsi-meet-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed3a4d9537f5433ddd49875099e7980ffc1235e32601d7b4d9f973254a43dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jitsi-meet-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed3a4d9537f5433ddd49875099e7980ffc1235e32601d7b4d9f973254a43dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-36736
Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...
CVE-2022-43550
A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...
CVE-2021-39205
Jitsi Meet is an open source video conferencing application. Versions prior to 2.0.6173 are vulnerable to client-side cross-site scripting via injecting properties into JSON objects that were not properly escaped. There are no known incidents related to this vulnerability being exploited in the...
CVE-2021-26812
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...