onionshare vulnerabilities (Debian)

14 vulnerabilities.

• onionshare Debian OnionShare Receive mode writes uploaded files even when file uploads are disabled CVE-2026-54707 Fix available 5.4 MediumJuly 1, 2026
• onionshare Debian OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files CVE-2026-54706 Fix available 4.8 MediumJuly 1, 2026
• onionshare Debian OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website CVE-2022-21694 Fix available 3.7 LowJanuary 18, 2022
• onionshare Debian Cross-Site Scripting in Onionshare CVE-2022-21690 Fix available 8.7 HighJanuary 18, 2022
• onionshare Debian Improper Access Control in Onionshare CVE-2022-21692 Fix available 4.3 MediumJanuary 18, 2022
• onionshare Debian Denial of Service in Onionshare CVE-2022-21689 Fix available 7.5 HighJanuary 18, 2022
• onionshare Debian Path traversal in Onionshare CVE-2022-21693 Fix available 6.3 MediumJanuary 18, 2022
• onionshare Debian Improper Access Control in Onionshare CVE-2022-21691 Fix available 4.3 MediumJanuary 18, 2022
• onionshare Debian Improper Access Control in Onionshare CVE-2022-21695 Fix available 4.3 MediumJanuary 18, 2022
• onionshare Debian Username spoofing in OnionShare CVE-2022-21696 Fix available 4.3 MediumJanuary 18, 2022
• onionshare Debian Information disclosure vulnerability in OnionShare CVE-2021-41867 Fix available 5.3 MediumOctober 4, 2021
• onionshare Debian Remote unauthenticated attackers able to upload files in Onionshare CVE-2021-41868 Fix available 9.8 CriticalOctober 4, 2021
• onionshare Debian Withdrawn Advisory: OnionShare Predictable Pathname CVE-2018-19960 Fix available 7.0 HighDecember 7, 2018
• onionshare Debian hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating... CVE-2016-5026 Fix available 5.5 MediumJanuary 30, 2017