jamovi vulnerabilities and fixes

Q: How do I fix jamovi vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is jamovi being exploited right now?

None of the tracked jamovi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which jamovi CVE should I patch first?

CVE-2021-28079 currently ranks highest (44/100): Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability.

Recent CVEs affecting jamovi, with upgrade or downgrade steps. 1 tracked.

jamovi has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-04-26. Highest priority: CVE-2021-28079 (score 44/100).

CVE-2021-28079 MEDIUM 6.1 UPGRADE Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability

FAQ

How do I fix jamovi vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is jamovi being exploited right now?

None of the tracked jamovi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which jamovi CVE should I patch first?

CVE-2021-28079 currently ranks highest (44/100): Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability.

← Back to latest CVEs