@jitsi/electron-sdk vulnerabilities

CVEs whose affected-version data names the @jitsi/electron-sdk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92299High· 7.4

1w ago

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker, allowing any script in the meeting page to enumerate screens and windows

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-…

▾ TwilightJitsi · @jitsi/electron-sdkEPSS 0.35%via NVD