Skip to content
OpenAdvisories

Product · freedomofpress

securedrop

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2026-50000

    SecureDrop: API session token reuse against the Journalist Interface web UI

    SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. From 2.5.0 until 2.16.0, the `Journalist Interface` can accept an `API session` token agai…

    freedomofpress securedrop