CVE-2026-54707

5.4 Moyenne

Publiée le 31/07/2026 à 19:16 · Modifiée le 10/09/2026 à 22:12 · Analyse NVD reportée · Source : security-advisories@github.com

Description

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disable_files setting in cli/onionshare_cli/web/receive_mode.py, where ReceiveModeRequest._get_file_stream() writes multipart file[] data to disk despite the text-only setting. This issue is fixed in version 2.6.4.

Traduire en français

Produits concernés

onionshare

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L`

Faiblesses (CWE)

CWE-863

Références

https://github.com/onionshare/onionshare/commit/a090e97193efc91fbeac9dace7793ea568b83cf5
https://github.com/onionshare/onionshare/releases/tag/v2.6.4
https://github.com/onionshare/onionshare/security/advisories/GHSA-v833-3823-cmhp
https://github.com/onionshare/onionshare/security/advisories/GHSA-v833-3823-cmhp

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories