Skip to content
OpenAdvisories

Vendor

freedomofpress

7 known vulnerabilities.

Products

securedrop-client 4 securedrop 2 dangerzone 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-50000

    SecureDrop: API session token reuse against the Journalist Interface web UI

    SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. From 2.5.0 until 2.16.0, the `Journalist Interface` can accept an `API session` token agai…

    freedomofpress securedrop
  • Medium 4.5
    CVE-2025-24889

    Path traversal in sd-log Qubes virtual machine

    The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. Prior to versions 0.14.1 and 1.0.1, an attacker who has already gained code execution in a virtual machine on t…

    freedomofpress securedrop-client