Количество 4
Количество 4
CVE-2026-54706
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop follows symbolic links in cli/onionshare_cli/web/send_base_mode.py through SendBaseModeWeb.set_file_info() and stream_individual_file(), allowing remote recipients of Share or Website mode to read local files outside the selected directory. This issue is fixed in version 2.6.4.
CVE-2026-54706
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop follows symbolic links in cli/onionshare_cli/web/send_base_mode.py through SendBaseModeWeb.set_file_info() and stream_individual_file(), allowing remote recipients of Share or Website mode to read local files outside the selected directory. This issue is fixed in version 2.6.4.
CVE-2026-54706
OnionShare is an open source tool that lets you securely and anonymous ...
GHSA-22p9-r2f5-22mf
OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-54706 OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop follows symbolic links in cli/onionshare_cli/web/send_base_mode.py through SendBaseModeWeb.set_file_info() and stream_individual_file(), allowing remote recipients of Share or Website mode to read local files outside the selected directory. This issue is fixed in version 2.6.4. | CVSS3: 4.8 | 0% Низкий | 7 дней назад |
 | CVE-2026-54706 OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop follows symbolic links in cli/onionshare_cli/web/send_base_mode.py through SendBaseModeWeb.set_file_info() and stream_individual_file(), allowing remote recipients of Share or Website mode to read local files outside the selected directory. This issue is fixed in version 2.6.4. | CVSS3: 4.8 | 0% Низкий | 7 дней назад |
| CVE-2026-54706 OnionShare is an open source tool that lets you securely and anonymous ... | CVSS3: 4.8 | 0% Низкий | 7 дней назад |
| GHSA-22p9-r2f5-22mf OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files | CVSS3: 4.8 | 0% Низкий | 8 дней назад |
Уязвимостей на страницу