{"action":"Upgrade onionshare-cli to 2.4 or later.","affected":[{"fixed":"2.4","introduced":"2.3"}],"component":"onionshare-cli","cve_ids":["CVE-2021-41868"],"ecosystem":"PyPI","epss":0.02417,"exploited":false,"fixed_versions":["2.4"],"ghsa_id":"GHSA-7g47-xxff-9p85","id":"tcs_01M5KF5WEQWN2KAWFMNSSGFKK3","modified_at":"2026-06-29T12:26:04.811382228Z","published_at":"2021-11-19T20:39:44Z","references":["https://osv.dev/vulnerability/GHSA-7g47-xxff-9p85","https://nvd.nist.gov/vuln/detail/CVE-2021-41868","https://github.com/onionshare/onionshare/issues/1396","https://github.com/onionshare/onionshare/pull/1404","https://github.com/onionshare/onionshare","https://www.ihteam.net/advisory/onionshare"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7g47-xxff-9p85","url":"https://osv.dev/vulnerability/GHSA-7g47-xxff-9p85"}],"summary":"Remote unauthenticated attackers able to upload files in Onionshare"}