CVE-2022-21691

4.3 mediumEPSS 0.7%

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions chat participants can spoof their channel leave message, tricking others into assuming they left the chatroom.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2022-01-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

onionshare:onionshare

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-w9m4-7w72-r766	PyPI	onionshare-cli	>=2.3 <2.5	2.5
PYSEC-2022-42	PyPI	onionshare-cli	<2.5	2.5

References

https://github.com/onionshare/onionshare/releases/tag/v2.5
https://github.com/onionshare/onionshare/security/advisories/GHSA-w9m4-7w72-r766
https://github.com/onionshare/onionshare/releases/tag/v2.5
https://github.com/onionshare/onionshare/security/advisories/GHSA-w9m4-7w72-r766

Check your stack JSON