CVE-2022-21696
2 advisories.
PyPI/onionshare-cli CVE-2022-21696: medium 4.3, EPSS 0.71%
Username spoofing in OnionShare
Action: Upgrade onionshare-cli to 2.5 or later.
pip install onionshare-cli==2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3 | 2.5 | - |
Fixed versions
| 2.5 |
Sources
- osv: GHSA-68vr-8f46-vc9f
- https://github.com/onionshare/onionshare/security/advisories/GHSA-68vr-8f46-vc9f
- https://nvd.nist.gov/vuln/detail/CVE-2022-21696
- https://github.com/onionshare/onionshare
- https://github.com/onionshare/onionshare/releases/tag/v2.5
- https://github.com/pypa/advisory-database/tree/main/vulns/onionshare-cli/PYSEC-2022-47.yaml
CVE-2022-21696 · published · modified · JSON
PyPI/onionshare-cli CVE-2022-21696: unknown, EPSS 0.71%
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the user
Action: Upgrade onionshare-cli to 2.5 or later.
pip install onionshare-cli==2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5 | - |
Fixed versions
| 2.5 |
Sources
- osv: PYSEC-2022-47
- https://github.com/onionshare/onionshare/security/advisories/GHSA-68vr-8f46-vc9f
- https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE-2022-21696 · published · modified · JSON