https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:25:24 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-04446 cnvd-2019-04446 https://cve.radiocsirt.org/vuln/cnvd-2019-04446 https://cve.radiocsirt.org/vuln/euvd-2026-168523 EUVD-2026-168523 https://cve.radiocsirt.org/vuln/euvd-2026-168523 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19960 <p>The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname.</p> <p>The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-19960 https://cve.radiocsirt.org/vuln/ghsa-pwjq-6wrh-5w8q <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: onionshare-cli</p> <p>## Withdrawn Advisory This advisory has been withdrawn because the advisory concerns the repository https://github.com/onionshare/onionshare, which is not in a [supported ecosystem](https://github.com/github/advisory-database/blob/main/README.md#supported-ecosystems). [onionshare-cli](https://pypi.org/project/onionshare-cli/) is not affected by this issue.</p> <p>## Original Description The `debug_mode` function in `web/web.py` in OnionShare through 1.3.1, when `--debug` is enabled, uses the `/tmp/onionshare_server.log` pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: onionshare-cli</p> <p>## Withdrawn Advisory This advisory has been withdrawn because the advisory concerns the repository https://github.com/onionshare/onionshare, which is not in a [supported ecosystem](https://github.com/github/advisory-database/blob/main/README.md#supported-ecosystems). [onionshare-cli](https://pypi.org/project/onionshare-cli/) is not affected by this issue.</p> <p>## Original Description The `debug_mode` function in `web/web.py` in OnionShare through 1.3.1, when `--debug` is enabled, uses the `/tmp/onionshare_server.log` pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname.</p> https://cve.radiocsirt.org/vuln/ghsa-pwjq-6wrh-5w8q https://cve.radiocsirt.org/vuln/gsd-2018-19960 gsd-2018-19960 https://cve.radiocsirt.org/vuln/gsd-2018-19960 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11246-1 <p>python-onionshare-2.3.3-2.5 on GA media</p> <p>python-onionshare-2.3.3-2.5 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11246-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19960 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: onionshare, Ubuntu:Pro:18.04:LTS: onionshare</p> <p>The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: onionshare, Ubuntu:Pro:18.04:LTS: onionshare</p> <p>The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19960