MEDIUM4.8PyPI
GHSA-22p9-r2f5-22mf· CVE-2026-54706, PYSEC-2026-3585OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files
Modified: 8/4/2026
package
PyPI/onionshare-cli
pkg:pypi/onionshare-cli
MEDIUM4.3PyPI
GHSA-68vr-8f46-vc9f· CVE-2022-21696, PYSEC-2022-47Username spoofing in OnionShare
Modified: 10/8/2024
MEDIUMPyPI
GHSA-6rvj-pw9w-jcvc· CVE-2021-41867, PYSEC-2026-696Information disclosure vulnerability in OnionShare
Modified: 7/6/2026
CRITICAL9.8PyPI
GHSA-7g47-xxff-9p85· CVE-2021-41868, PYSEC-2026-434Remote unauthenticated attackers able to upload files in Onionshare
Modified: 6/29/2026
MEDIUM4.3PyPI
GHSA-99p8-9p2c-49j4· CVE-2022-21695, PYSEC-2022-46Improper Access Control in Onionshare
Modified: 10/8/2024
HIGH8.7PyPI
GHSA-ch22-x2v3-v6vq· CVE-2022-21690, PYSEC-2022-41OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend
Modified: 10/7/2024
MEDIUM4.3PyPI
GHSA-gjj5-998g-v36v· CVE-2022-21692, PYSEC-2022-43Improper Access Control in Onionshare
Modified: 10/7/2024
LOW3.7PyPI
GHSA-h29c-wcm8-883h· CVE-2022-21694, PYSEC-2022-45Incorrect Permission Assignment for Critical Resource in OnionShare
Modified: 10/7/2024
MEDIUM6.3PyPI
GHSA-jgm9-xpfj-4fq6· CVE-2022-21693, PYSEC-2022-44Path traversal in Onionshare
Modified: 10/7/2024
HIGH7.5PyPI
GHSA-jh82-c5jw-pxpc· CVE-2022-21689, PYSEC-2022-40Denial of Service in Onionshare
Modified: 10/8/2024
MEDIUM5.4PyPI
GHSA-v833-3823-cmhp· CVE-2026-54707, PYSEC-2026-3586OnionShare Receive mode writes uploaded files even when file uploads are disabled
Modified: 8/4/2026
MEDIUM4.3PyPI
GHSA-w9m4-7w72-r766· CVE-2022-21691, PYSEC-2022-42Improper Access Control in Onionshare
Modified: 10/7/2024
HIGH7.5PyPI
GHSA-x7wr-283h-5h2v· CVE-2022-21688, PYSEC-2022-39Out-of-bounds Read in Onionshare
Modified: 10/8/2024
—PyPI
PYSEC-2022-39· CVE-2022-21688, GHSA-x7wr-283h-5h2vModified: 11/8/2023
—PyPI
PYSEC-2022-40· CVE-2022-21689, GHSA-jh82-c5jw-pxpcModified: 11/8/2023
—PyPI
PYSEC-2022-41· CVE-2022-21690, GHSA-ch22-x2v3-v6vqModified: 11/8/2023
—PyPI
PYSEC-2022-42· CVE-2022-21691, GHSA-w9m4-7w72-r766Modified: 11/8/2023
—PyPI
PYSEC-2022-43· CVE-2022-21692, GHSA-gjj5-998g-v36vModified: 11/8/2023
—PyPI
PYSEC-2022-44· CVE-2022-21693, GHSA-jgm9-xpfj-4fq6Modified: 11/8/2023
—PyPI
PYSEC-2022-45· CVE-2022-21694, GHSA-h29c-wcm8-883hModified: 11/8/2023
—PyPI
PYSEC-2022-46· CVE-2022-21695, GHSA-99p8-9p2c-49j4Modified: 11/8/2023
—PyPI
PYSEC-2022-47· CVE-2022-21696, GHSA-68vr-8f46-vc9fModified: 11/8/2023
MEDIUM4.8PyPI
PYSEC-2026-3585· CVE-2026-54706, GHSA-22p9-r2f5-22mfOnionShare follows symlinks in shared directories, allowing unintended disclosure of local files
Modified: 8/4/2026
MEDIUM5.4PyPI
PYSEC-2026-3586· CVE-2026-54707, GHSA-v833-3823-cmhpOnionShare Receive mode writes uploaded files even when file uploads are disabled
Modified: 8/4/2026
CRITICAL9.8PyPI
PYSEC-2026-434· CVE-2021-41868, GHSA-7g47-xxff-9p85Remote unauthenticated attackers able to upload files in Onionshare
Modified: 7/1/2026
—PyPI
PYSEC-2026-696· CVE-2021-41867, GHSA-6rvj-pw9w-jcvcInformation disclosure vulnerability in OnionShare
Modified: 7/6/2026