Log in Start free

onionshare

Products

ProductCVEsExploitedLatest
onionshare11–Jul 31, 2026

Exploited and recent CVEs

  • CVE-2026-54706 Medium 4.8 OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files 0.3%
  • CVE-2026-54707 Medium 5.4 OnionShare Receive mode writes uploaded files even when file uploads are disabled 0.4%
  • CVE-2022-21694 Low 3.7 OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website 1.3%
  • CVE-2022-21690 High 8.7 Cross-Site Scripting in Onionshare 0.8%
  • CVE-2022-21692 Medium 4.3 Improper Access Control in Onionshare 0.8%
  • CVE-2022-21689 High 7.5 Denial of Service in Onionshare 1.3%
  • CVE-2022-21693 Medium 6.3 Path traversal in Onionshare 1.2%
  • CVE-2022-21691 Medium 4.3 Improper Access Control in Onionshare 0.7%
  • CVE-2022-21695 Medium 4.3 Improper Access Control in Onionshare 0.9%
  • CVE-2022-21688 High 7.5 Out-of-bounds Read in Onionshare 0.9%
  • CVE-2022-21696 Medium 4.3 Username spoofing in OnionShare 0.7%