freedomofpress vulnerabilities

7 published CVEs name freedomofpress among the affected products.

Critical 0High 2Medium 2Low 3Not scored 0

CVEs per yearBy the year they were published

CVE-2026-71863
SecureDrop: Onion Service client auth credentials copied to Monitor Server
freedomofpress · securedrop
Low2.6
CVE-2026-50000
SecureDrop: API session token reuse against the Journalist Interface web UI
freedomofpress · securedrop
Medium5.0
CVE-2026-49996
securedrop-proxy origin limitation can be bypassed with redirects
freedomofpress · securedrop-client
Low3.7
CVE-2026-35465
SecureDrop Client has path injection in read_gzip_header_filename()
freedomofpress · securedrop-client
High7.5
CVE-2025-24889
Path traversal in sd-log Qubes virtual machine
freedomofpress · securedrop-client
Medium4.5
CVE-2025-24888
Path traversal in SecureDrop Client API.download_reply()
freedomofpress · securedrop-client
High8.1
CVE-2023-39342
Dangerzone CLI does not sanitize ANSI escape characters
freedomofpress · dangerzone
Low3.6