What's Changed
This is a hotfix release.
🔒 Security Fixes
- Prevent Element Call from reporting full URLs of visited pages to analytics server (#3968, ELEMENTSEC-2026-1713, GHSA-6vhh-4xw6-h2h2, CVE-2026-48007)
Full Changelog: v0.19.3...v0.19.4
Embedded packages
This release includes the following embedded packages that allow Element Call to be used as an embedded widget
within another application.
NPM
npm install @element-hq/element-call-embedded@0.19.4
Android AAR
dependencies {
implementation 'io.element.android:element-call-embedded:0.19.4'
}
SwiftPM
.package(url: "https://github.com/element-hq/element-call-swift.git", from: "0.19.4")
Docker full package
Element Call is available as a Docker image from the GitHub Container Registry.
The image provides a full build of Element Call that can be used both in standalone and as a widget (on a remote URL).
docker pull ghcr.io/element-hq/element-call:v0.19.4