{"action":"Upgrade onionshare-cli to 2.4 or later.","affected":[{"fixed":"2.4","introduced":"2.3"}],"component":"onionshare-cli","cve_ids":["CVE-2021-41868"],"ecosystem":"PyPI","epss":0.02417,"exploited":false,"fixed_versions":["2.4"],"ghsa_id":"GHSA-7g47-xxff-9p85","id":"tcs_01M5KHBAR52W2CTYDSDMV6DNF2","modified_at":"2026-07-01T20:22:59.378325Z","published_at":"2026-06-29T11:50:52.997366Z","references":["https://osv.dev/vulnerability/PYSEC-2026-434","https://nvd.nist.gov/vuln/detail/CVE-2021-41868","https://github.com/onionshare/onionshare/issues/1396","https://github.com/onionshare/onionshare/pull/1404","https://github.com/onionshare/onionshare","https://www.ihteam.net/advisory/onionshare","https://pypi.org/project/onionshare-cli","https://github.com/advisories/GHSA-7g47-xxff-9p85"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-434","url":"https://osv.dev/vulnerability/PYSEC-2026-434"}],"summary":"Remote unauthenticated attackers able to upload files in Onionshare"}