freedomofpress vulnerabilities
7 published CVEs name freedomofpress among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-71863
SecureDrop: Onion Service client auth credentials copied to Monitor Server
freedomofpress · securedrop
Low2.6 - CVE-2026-50000
SecureDrop: API session token reuse against the Journalist Interface web UI
freedomofpress · securedrop
Medium5.0 - CVE-2026-49996
securedrop-proxy origin limitation can be bypassed with redirects
freedomofpress · securedrop-client
Low3.7 - CVE-2026-35465
SecureDrop Client has path injection in read_gzip_header_filename()
freedomofpress · securedrop-client
High7.5 - CVE-2025-24889
Path traversal in sd-log Qubes virtual machine
freedomofpress · securedrop-client
Medium4.5 - CVE-2025-24888
Path traversal in SecureDrop Client API.download_reply()
freedomofpress · securedrop-client
High8.1 - CVE-2023-39342
Dangerzone CLI does not sanitize ANSI escape characters
freedomofpress · dangerzone
Low3.6