CVE-2026-54707
2 advisories.
PyPI/onionshare-cli CVE-2026-54707: medium 5.4, EPSS 0.40%
OnionShare Receive mode writes uploaded files even when file uploads are disabled
Action: Upgrade onionshare-cli to 2.6.4 or later.
pip install onionshare-cli==2.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.4 | - |
Fixed versions
| 2.6.4 |
Sources
- osv: GHSA-v833-3823-cmhp
- https://github.com/onionshare/onionshare/security/advisories/GHSA-v833-3823-cmhp
- https://github.com/onionshare/onionshare/commit/a090e97193efc91fbeac9dace7793ea568b83cf5
- https://github.com/onionshare/onionshare
- https://github.com/onionshare/onionshare/releases/tag/v2.6.4
CVE-2026-54707 · published · modified · JSON
PyPI/onionshare-cli CVE-2026-54707: medium 5.4, EPSS 0.40%
OnionShare Receive mode writes uploaded files even when file uploads are disabled
Action: Upgrade onionshare-cli to 2.6.4 or later.
pip install onionshare-cli==2.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.4 | - |
Fixed versions
| 2.6.4 |
Sources
- osv: PYSEC-2026-3586
- https://github.com/onionshare/onionshare/security/advisories/GHSA-v833-3823-cmhp
- https://github.com/onionshare/onionshare/commit/a090e97193efc91fbeac9dace7793ea568b83cf5
- https://github.com/onionshare/onionshare
- https://github.com/onionshare/onionshare/releases/tag/v2.6.4
- https://pypi.org/project/onionshare-cli
- https://github.com/advisories/GHSA-v833-3823-cmhp
- https://nvd.nist.gov/vuln/detail/CVE-2026-54707
CVE-2026-54707 · published · modified · JSON