Skip to content
OpenAdvisories

Vendor

freedomofpress

7 known vulnerabilities.

Products

securedrop-client 4 securedrop 2 dangerzone 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.6
    CVE-2026-71863

    SecureDrop: Onion Service client auth credentials copied to Monitor Server

    SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. From 2.13.0 until 2.16.1, running the securedrop-admin install Ansible playbook with journ…

    freedomofpress securedrop
  • Low 3.7
    CVE-2026-49996

    securedrop-proxy origin limitation can be bypassed with redirects

    SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. Prior to version 1.3.1, a malicious SecureDrop Server could bypass securedrop-proxy's origin limitation by responding…

    freedomofpress securedrop-client
  • Low 3.6
    CVE-2023-39342

    Dangerzone CLI does not sanitize ANSI escape characters

    Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI (`dangerzone-cli` command) logs output from the container where the file sanitization takes place, to the user's terminal. Prior to …

    freedomofpress dangerzone