Onionshare vulnerabilities

Products

• Onionshare 15

Newest

• onionshare OnionShare Receive mode writes uploaded files even when file uploads are disabled CVE-2026-54707 Fix available 5.4 MediumJuly 1, 2026
• onionshare OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files CVE-2026-54706 Fix available 4.8 MediumJuly 1, 2026
• onionshare OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website CVE-2022-21694 Fix available 3.7 LowJanuary 18, 2022
• onionshare Cross-Site Scripting in Onionshare CVE-2022-21690 Fix available 8.7 HighJanuary 18, 2022
• onionshare Improper Access Control in Onionshare CVE-2022-21692 Fix available 4.3 MediumJanuary 18, 2022
• onionshare Denial of Service in Onionshare CVE-2022-21689 Fix available 7.5 HighJanuary 18, 2022
• onionshare Path traversal in Onionshare CVE-2022-21693 Fix available 6.3 MediumJanuary 18, 2022
• onionshare Improper Access Control in Onionshare CVE-2022-21691 Fix available 4.3 MediumJanuary 18, 2022
• onionshare Improper Access Control in Onionshare CVE-2022-21695 Fix available 4.3 MediumJanuary 18, 2022
• onionshare Out-of-bounds Read in Onionshare CVE-2022-21688 Fix available 7.5 HighJanuary 18, 2022
• onionshare Username spoofing in OnionShare CVE-2022-21696 Fix available 4.3 MediumJanuary 18, 2022
• onionshare Information disclosure vulnerability in OnionShare CVE-2021-41867 Fix available 5.3 MediumOctober 4, 2021
• onionshare Remote unauthenticated attackers able to upload files in Onionshare CVE-2021-41868 Fix available 9.8 CriticalOctober 4, 2021
• onionshare Withdrawn Advisory: OnionShare Predictable Pathname CVE-2018-19960 Fix available 7.0 HighDecember 7, 2018
• onionshare hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating... CVE-2016-5026 Fix available 5.5 MediumJanuary 30, 2017