en
Jitsi Meet is an open-source video conferencing application from the Jitsi project and developer community. It provides browser-based audio and video meetings with screen sharing, chat, custom meeting links, and integration options. It can be used as a hosted service, self-hosted on Linux servers, or embedded in web applications for individuals, teams, organizations, and developers.
Official website · jitsi.orgAs of 10/04/2026, within CyStack's analyzed data, jitsi-meet has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of jitsi-meet and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScanSeverity across 3 analyzed records
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-64754Jitsi Meet has DOM Redirect on Microsoft OAuth Flow | Exploitation statusNot known exploited | FixYes | Published11/13/2025 | SeverityLow |
CVE-2021-39215Authentication Bypass: Forged Tokens Allow Access to Arbitrary Rooms | Exploitation statusNot confirmed | FixYes | Published09/15/2021 | SeverityHigh |
CVE-2021-39205DOM-based XSS/Content Spoofing via Prototype Pollution | Exploitation statusNot confirmed | FixYes | Published09/15/2021 | SeverityMedium |
