Vulnerabilities in freedomofpress

4 results

CVE-2025-24888HIGHPath traversal in SecureDrop Client API.download_reply()EPSS 0.9%CVE-2026-35465HIGHSecureDrop Client has path injection in read_gzip_header_filename()EPSS 0.4%CVE-2023-39342LOWDangerzone CLI does not sanitize ANSI escape characters EPSS 0.2%CVE-2025-24889MEDIUMPath traversal in sd-log Qubes virtual machineEPSS 0.2%