onionshare vulnerabilities

CVEs per yearBy the year they were published

1. 20229
2. 20262

Newest CVEs

• CVE-2026-54706

  OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files

  onionshare · onionshare

  Medium4.8
• CVE-2026-54707

  OnionShare Receive mode writes uploaded files even when file uploads are disabled

  onionshare · onionshare

  Medium5.4
• CVE-2022-21694

  OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website

  onionshare · onionshare

  Low3.7
• CVE-2022-21690

  Cross-Site Scripting in Onionshare

  onionshare · onionshare

  High8.7
• CVE-2022-21692

  Improper Access Control in Onionshare

  onionshare · onionshare

  Medium4.3
• CVE-2022-21689

  Denial of Service in Onionshare

  onionshare · onionshare

  High7.5
• CVE-2022-21693

  Path traversal in Onionshare

  onionshare · onionshare

  Medium6.3
• CVE-2022-21691

  Improper Access Control in Onionshare

  onionshare · onionshare

  Medium4.3
• CVE-2022-21695

  Improper Access Control in Onionshare

  onionshare · onionshare

  Medium4.3
• CVE-2022-21688

  Out-of-bounds Read in Onionshare

  onionshare · onionshare

  High7.5