CVE-2026-54707 OnionShare Receive mode writes uploaded files even when file uploads are disabled

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disablefiles setting in cli/onionsharecli/web/receivemode.py, where...

DEBIAN-CVE-2026-54707

Bulletin has no description...

python3-onionshare-2.6.4-1.1 on GA media (moderate)

python3-onionshare-2.6.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11169-1 Rating: moderate Cross-References: CVE-2026-54706 CVE-2026-54707 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed...