jitsu vulnerabilities

CVEs whose affected-version data names the jitsu package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-115509Medium· 4.2

yesterday

Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API

Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await, so the syncId ownership check never fails. Authenticated users knowing another workspac…

▾ Sunlitjitsucom · jitsuvia CVEORG