Skip to content
OpenAdvisories

Product · freedomofpress

securedrop-client

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-49996

    securedrop-proxy origin limitation can be bypassed with redirects

    SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. Prior to version 1.3.1, a malicious SecureDrop Server could bypass securedrop-proxy's origin limitation by responding…

    freedomofpress securedrop-client