https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:46:43.593420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-06481 cnvd-2022-06481 2026-10-08T02:46:43.723824+00:00 cnvd-2022-06481 https://cve.radiocsirt.org/vuln/euvd-2026-31914 EUVD-2026-31914 2026-10-08T02:46:43.723877+00:00 EUVD-2026-31914 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41868 fkie_cve-2021-41868 2026-10-08T02:46:43.723893+00:00

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.

 https://cve.radiocsirt.org/vuln/ghsa-7g47-xxff-9p85 GHSA-7g47-xxff-9p85 — Remote unauthenticated attackers able to upload files in Onionshare 2026-10-08T02:46:43.723924+00:00

Affected: PyPI: onionshare-cli

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.

 https://cve.radiocsirt.org/vuln/gsd-2021-41868 gsd-2021-41868 2026-10-08T02:46:43.723948+00:00 gsd-2021-41868 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11557-1 openSUSE-SU-2024:11557-1 — python-onionshare-2.4-1.1 on GA media 2026-10-08T02:46:43.723959+00:00

python-onionshare-2.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-434 PYSEC-2026-434 — Remote unauthenticated attackers able to upload files in Onionshare 2026-10-08T02:46:43.723978+00:00

Affected: PyPI: onionshare-cli

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41868 UBUNTU-CVE-2021-41868 2026-10-08T02:46:43.723996+00:00

Affected: Ubuntu:Pro:16.04:LTS: onionshare, Ubuntu:Pro:18.04:LTS: onionshare, Ubuntu:Pro:20.04:LTS: onionshare, Ubuntu:Pro:22.04:LTS: onionshare

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.