Known vulnerabilities in Janus WebRTC Server

Vendor: Meetecho
Software CPE: cpe:2.3:a:meetecho:janus-gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 4
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Janus WebRTC Server Janus WebRTC Server is affected by 16 known vulnerabilities: 4 high, 9 medium, 3 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155753 - Use After Free
CWE-416 Medium
No
No
0.16.3, 1.4.3 14.10.2026 SB2026101470
#VU155751 - Stack-based buffer overflow
CWE-121 Medium
No
No
0.16.3, 1.4.3 14.10.2026 SB2026101470
#VU155752 - Heap-based Buffer Overflow
CWE-122 Medium
No
No
0.16.3, 1.4.3 14.10.2026 SB2026101470
#VU151866 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 High
No
No
0.16.2, 1.4.2 23.09.2026 SB2026092377
#VU151864 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
0.16.2, 1.4.2 23.09.2026 SB2026092377
#VU151865 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
0.16.2, 1.4.2 23.09.2026 SB2026092377
#VU151863 - Out-of-bounds write
CWE-787 Low
No
No
0.16.2, 1.4.2 23.09.2026 SB2026092377
#VU151862 - Use After Free
CWE-416 Medium
No
No
0.16.2, 1.4.2 23.09.2026 SB2026092377
#VU151861 - Resource exhaustion
CWE-400 Low
No
No
0.16.2, 1.4.2 23.09.2026 SB2026092377
#VU151860 - NULL Pointer Dereference
CWE-476 Low
No
No
0.16.2, 1.4.2 23.09.2026 SB2026092377
#VU29936 - Out-of-bounds read
CVE-2020-13899
CWE-125 Medium
Available
No
0.10.1 15.07.2020 SB2020061118
#VU29935 - Memory corruption
CVE-2020-14034
CWE-119 High
No
No
0.10.1 15.07.2020 SB2020061118
#VU29934 - Memory corruption
CVE-2020-14033
CWE-119 High
No
No
0.10.1 15.07.2020 SB2020061118
#VU29933 - Out-of-bounds write
CVE-2020-13901
CWE-787 High
Available
No
0.10.1 15.07.2020 SB2020061118
#VU29932 - NULL Pointer Dereference
CVE-2020-13900
CWE-476 Medium
Available
No
0.10.1 15.07.2020 SB2020061118
#VU29931 - NULL Pointer Dereference
CVE-2020-13898
CWE-476 Medium
Available
No
0.10.1 15.07.2020 SB2020061118