Skip to content
OpenAdvisories

Product · freedomofpress

securedrop-client

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.5
    CVE-2025-24889

    Path traversal in sd-log Qubes virtual machine

    The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. Prior to versions 0.14.1 and 1.0.1, an attacker who has already gained code execution in a virtual machine on t…

    freedomofpress securedrop-client