Vulnerabilities

TI-2026-39522 CVE-2026-54706 · GHSA-22p9-r2f5-22mf

OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files

MEDIUM 55

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00344 Published 2026-07-31 Fixed in 2.6.4 CWE-59

TI-2026-39523 CVE-2026-54707 · GHSA-v833-3823-cmhp

OnionShare Receive mode writes uploaded files even when file uploads are disabled

MEDIUM 58

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.004 Published 2026-07-31 Fixed in 2.6.4 CWE-863

TI-2022-06070 CVE-2022-21694 · GHSA-h29c-wcm8-883h

Incorrect permission assignment in onionshare

LOW 27

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01258 Published 2022-01-18 Fixed in 2.5 CWE-732

TI-2022-06066 CVE-2022-21690 · GHSA-ch22-x2v3-v6vq

Cross-Site Scripting in Onionshare

HIGH 73

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00795 Published 2022-01-18 Fixed in 2.5 CWE-79

TI-2022-06068 CVE-2022-21692 · GHSA-gjj5-998g-v36v

Improper Access Control in Onionshare

MEDIUM 53

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00777 Published 2022-01-18 Fixed in 2.5 CWE-287

TI-2022-06065 CVE-2022-21689 · GHSA-jh82-c5jw-pxpc

Denial of Service in Onionshare

MEDIUM 42

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01347 Published 2022-01-18 Fixed in 2.5 CWE-400

TI-2022-06069 CVE-2022-21693 · GHSA-jgm9-xpfj-4fq6

Path traversal in Onionshare

LOW 31

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01161 Published 2022-01-18 Fixed in 2.5 CWE-22

TI-2022-06067 CVE-2022-21691 · GHSA-w9m4-7w72-r766

Improper Access Control in Onionshare

LOW 21

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00679 Published 2022-01-18 Fixed in 2.5 CWE-306

TI-2022-06071 CVE-2022-21695 · GHSA-99p8-9p2c-49j4

Improper Access Control in Onionshare

LOW 26

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00856 Published 2022-01-18 Fixed in 2.5 CWE-287

TI-2022-06064 CVE-2022-21688 · GHSA-x7wr-283h-5h2v

Out-of-bounds Read in Onionshare

MEDIUM 40

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00861 Published 2022-01-18 Fixed in 2.5 CWE-125

TI-2022-06072 CVE-2022-21696 · GHSA-68vr-8f46-vc9f

Username spoofing in OnionShare

LOW 21

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00714 Published 2022-01-18 Fixed in 2.5 CWE-20

TI-2021-18478 CVE-2021-41867 · GHSA-6rvj-pw9w-jcvc

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote…

LOW 28

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01809 Published 2021-10-04 Fixed in 2.4 CWE-200

TI-2021-18479 CVE-2021-41868 · GHSA-7g47-xxff-9p85

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a…

MEDIUM 47

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02417 Published 2021-10-04 Fixed in 2.4

TI-2018-14146 CVE-2018-19960

The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is…

LOW 31

The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files or obtain sensitive i…

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00342 Published 2018-12-07 No fix listed CWE-20

TI-2016-04345 CVE-2016-5026 · GHSA-55hg-465f-gp62

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by…

LOW 25

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00327 Published 2017-01-30 No fix listed CWE-284

Vulnerabilities

Filters