Vulnerabilities in freedomofpress

7 results

CVE-2025-24888HIGHPath traversal in SecureDrop Client API.download_reply()EPSS 1.0%CVE-2026-35465HIGHSecureDrop Client has path injection in read_gzip_header_filename()EPSS 0.4%CVE-2026-50000MEDIUMSecureDrop: API session token reuse against the Journalist Interface web UIEPSS 0.4%CVE-2026-49996LOWsecuredrop-proxy origin limitation can be bypassed with redirectsEPSS 0.3%CVE-2023-39342LOWDangerzone CLI does not sanitize ANSI escape characters EPSS 0.3%CVE-2026-71863LOWSecureDrop: Onion Service client auth credentials copied to Monitor ServerEPSS 0.2%CVE-2025-24889MEDIUMPath traversal in sd-log Qubes virtual machineEPSS 0.2%