onionshare — Vulnerabilities & Security Advisories 9

Onionshare enables secure file sharing through Tor, allowing users to send files anonymously without tracking. Historically, it has faced vulnerabilities including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation, primarily stemming from improper input validation and insecure session management. The application's Tor integration provides inherent anonymity but has been compromised in past versions through directory traversal flaws and insecure default configurations. While no major public security incidents have been documented, the 9 CVEs on record highlight ongoing challenges in secure development, particularly around web service components and file handling mechanisms.