277 matches found
CVE-2026-54707 OnionShare Receive mode writes uploaded files even when file uploads are disabled
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disablefiles setting in cli/onionsharecli/web/receivemode.py, where...
OnionShare Receive mode writes uploaded files even when file uploads are disabled
Summary OnionShare CLI/Desktop 2.6.3 does not enforce the Receive mode disablefiles setting at the file upload sink. When a Receive service is configured as a text-message-only endpoint --disable-files / "Disable uploading files", a remote sender who can reach the OnionShare service can still sen...
GHSA-V833-3823-CMHP OnionShare Receive mode writes uploaded files even when file uploads are disabled
Summary OnionShare CLI/Desktop 2.6.3 does not enforce the Receive mode disablefiles setting at the file upload sink. When a Receive service is configured as a text-message-only endpoint --disable-files / "Disable uploading files", a remote sender who can reach the OnionShare service can still sen...
Linux Distros Unpatched Vulnerability : CVE-2026-54706
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4...
Linux Distros Unpatched Vulnerability : CVE-2026-54707
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4...
PYSEC-2026-696 Information disclosure vulnerability in OnionShare
An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...
python3-onionshare-2.6.4-1.1 on GA media (moderate)
python3-onionshare-2.6.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11169-1 Rating: moderate Cross-References: CVE-2026-54706 CVE-2026-54707 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed...
PT-2026-55483
Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description OnionShare follows symbolic links symlinks within shared directories, which can lead to the unintended disclosure of local files from the host system. Recommendations Update to version 2.6.4-1...
PT-2026-55484
Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description In Receive mode, the software writes uploaded files to the system even when file uploads have been explicitly disabled. Recommendations Update to version 2.6.4-1.1...
OPENSUSE-SU-2026:11169-1 python3-onionshare-2.6.4-1.1 on GA media
These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...
PYSEC-2026-434 Remote unauthenticated attackers able to upload files in Onionshare
OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality...
EUVD-2021-2310
Malware in sbrugna...
EUVD-2016-5979
Malware in sbrugna...
EUVD-2021-2314
Malware in sbrugna...
EUVD-2022-0187
Malicious code in bioql PyPI...
EUVD-2022-0184
Malicious code in bioql PyPI...
EUVD-2022-0186
Malicious code in bioql PyPI...
EUVD-2022-0181
Malicious code in bioql PyPI...