Skip to content
OpenAdvisories

Package · Ubuntu

onionshare

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-54706

    OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files

    OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop follows symbolic links in cli/onionshare_cli/web/send_base_mode.py through…

    onionshare onionshare onionshare onionshare-cli Debian Ubuntu PyPI
  • Medium 5.4
    CVE-2026-54707

    OnionShare Receive mode writes uploaded files even when file uploads are disabled

    OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disable_files setting in cli/onionshare_…

    onionshare onionshare onionshare onionshare-cli Debian Ubuntu PyPI
  • Medium —
    CVE-2021-41867

    Information disclosure vulnerability in OnionShare

    An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature.

    onionshare onionshare-cli onionshare Debian Ubuntu PyPI