onionshare-cli vulnerabilities (PyPI)

13 vulnerabilities.

• onionshare-cli PyPI OnionShare Receive mode writes uploaded files even when file uploads are disabled CVE-2026-54707 Fix available 5.4 MediumJuly 1, 2026
• onionshare-cli PyPI OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files CVE-2026-54706 Fix available 4.8 MediumJuly 1, 2026
• onionshare-cli PyPI OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website CVE-2022-21694 Fix available 3.7 LowJanuary 18, 2022
• onionshare-cli PyPI Cross-Site Scripting in Onionshare CVE-2022-21690 Fix available 8.7 HighJanuary 18, 2022
• onionshare-cli PyPI Improper Access Control in Onionshare CVE-2022-21692 Fix available 4.3 MediumJanuary 18, 2022
• onionshare-cli PyPI Denial of Service in Onionshare CVE-2022-21689 Fix available 7.5 HighJanuary 18, 2022
• onionshare-cli PyPI Path traversal in Onionshare CVE-2022-21693 Fix available 6.3 MediumJanuary 18, 2022
• onionshare-cli PyPI Improper Access Control in Onionshare CVE-2022-21691 Fix available 4.3 MediumJanuary 18, 2022
• onionshare-cli PyPI Improper Access Control in Onionshare CVE-2022-21695 Fix available 4.3 MediumJanuary 18, 2022
• onionshare-cli PyPI Out-of-bounds Read in Onionshare CVE-2022-21688 Fix available 7.5 HighJanuary 18, 2022
• onionshare-cli PyPI Username spoofing in OnionShare CVE-2022-21696 Fix available 4.3 MediumJanuary 18, 2022
• onionshare-cli PyPI Information disclosure vulnerability in OnionShare CVE-2021-41867 Fix available 5.3 MediumOctober 4, 2021
• onionshare-cli PyPI Remote unauthenticated attackers able to upload files in Onionshare CVE-2021-41868 Fix available 9.8 CriticalOctober 4, 2021