element-call vulnerabilities

CVEs whose affected-version data names the element-call package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-62347Medium· 5.9

1w ago

Element Call exposes shared passwords in logs

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `SPA` logs the `password` URL query parameter. When a user submits an error report, called a rageshake, these logs are …

▾ Sunlitelement-hq · element-callEPSS 0.30%via CVEORG