All products

onionshare-cli

PyPI · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OnionShare follows symlinks in shared directories, allowing unintended disclosure of local filesCVE-2026-54706 · GHSA-22P9-R2F5-22MFVersion ranges need review. onionshare-cli PyPI Medium Fix reported
OnionShare Receive mode writes uploaded files even when file uploads are disabledCVE-2026-54707 · GHSA-V833-3823-CMHPVersion ranges need review. onionshare-cli PyPI Medium Fix reported
Information disclosure vulnerability in OnionShareCVE-2021-41867 · GHSA-6RVJ-PW9W-JCVCVersion ranges need review. onionshare-cli PyPI Medium Fix reported
Remote unauthenticated attackers able to upload files in OnionshareCVE-2021-41868 · GHSA-7G47-XXFF-9P85Version ranges need review. onionshare-cli PyPI Critical Fix reported
Out-of-bounds Read in OnionshareCVE-2022-21688 · GHSA-X7WR-283H-5H2VVersion ranges need review. onionshare-cli PyPI High Fix reported
Denial of Service in OnionshareCVE-2022-21689 · GHSA-JH82-C5JW-PXPCVersion ranges need review. onionshare-cli PyPI High Fix reported
Username spoofing in OnionShareCVE-2022-21696 · GHSA-68VR-8F46-VC9FVersion ranges need review. onionshare-cli PyPI Medium Fix reported
Improper Access Control in OnionshareCVE-2022-21695 · GHSA-99P8-9P2C-49J4Version ranges need review. onionshare-cli PyPI Medium Fix reported
Improper Access Control in OnionshareCVE-2022-21691 · GHSA-W9M4-7W72-R766Version ranges need review. onionshare-cli PyPI Medium Fix reported
Incorrect Permission Assignment for Critical Resource in OnionShareCVE-2022-21694 · GHSA-H29C-WCM8-883HVersion ranges need review. onionshare-cli PyPI Medium Fix reported
Improper Access Control in OnionshareCVE-2022-21692 · GHSA-GJJ5-998G-V36VVersion ranges need review. onionshare-cli PyPI Medium Fix reported
Path traversal in OnionshareCVE-2022-21693 · GHSA-JGM9-XPFJ-4FQ6Version ranges need review. onionshare-cli PyPI Medium Fix reported
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontendCVE-2022-21690 · GHSA-CH22-X2V3-V6VQVersion ranges need review. onionshare-cli PyPI Medium Fix reported