PyPI/onionshare-cli CVE-2022-21696: medium 4.3, EPSS 0.71%
Username spoofing in OnionShare
Action: Upgrade onionshare-cli to 2.5 or later.
pip install onionshare-cli==2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3 | 2.5 | - |
Fixed versions
| 2.5 |
Sources
- osv: GHSA-68vr-8f46-vc9f
- https://github.com/onionshare/onionshare/security/advisories/GHSA-68vr-8f46-vc9f
- https://nvd.nist.gov/vuln/detail/CVE-2022-21696
- https://github.com/onionshare/onionshare
- https://github.com/onionshare/onionshare/releases/tag/v2.5
- https://github.com/pypa/advisory-database/tree/main/vulns/onionshare-cli/PYSEC-2022-47.yaml
CVE-2022-21696 · published · modified · JSON