Freedom Securedrop vulnerabilities

• freedom securedrop-client SecureDrop Client has path injection in read_gzip_header_filename() CVE-2026-35465 7.5 HighApril 18, 2026
• freedom securedrop Freedom of the Press SecureDrop gpg-agent.conf symlink CVE-2022-4563 7.8 HighDecember 16, 2022