Skip to content
OpenAdvisories

Vendor

freedomofpress

7 known vulnerabilities.

Products

securedrop-client 4 securedrop 2 dangerzone 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-35465

    SecureDrop Client has path injection in read_gzip_header_filename()

    SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. In versions 0.17.4 and below, a compromised SecureDrop Server can achieve code execution on the Client's virtual mach…

    freedomofpress securedrop-client
  • High 8.1
    CVE-2025-24888

    Path traversal in SecureDrop Client API.download_reply()

    The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. Prior to version 0.14.1, a malicious SecureDrop Server could obtain code execution on the SecureDrop Client vir…

    freedomofpress securedrop-client