element-hq element-call Schwachstellen (CVE)

Für element-hq element-call veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

5.9Mittel

CVE-2026-62347 vor 16 Tagen

Element Call exposes shared passwords in logs

element-hq element-call

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `SPA` logs the `password` URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the applic…

8.6Hoch

CVE-2026-48007 vor 3 Monaten

Element Call reports full URLs of visited pages to analytics server

element-hq element-call

Element Call is a native Matrix video conferencing application. Versions 0.5.17 through 0.19.3 report analytics data to a PostHog server, when configured to by a `posthog` key in config.json or by the `posthogApiHost` and `posthogApiKey` URL parameters. Sever…