Freedomofpress vulnerabilities
We track 2 vulnerabilities in Freedomofpress products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 18, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Freedomofpress vulnerabilities
- 7.5 High severity
securedrop-client: Absolute Path Traversal
SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. In versions 0.17.4 and below, a compromised SecureDrop Server can achieve code execution on the Client's virtual machi
- 8.1 High severity
securedrop-client: Improper Limitation of a Pathname to a Restricted Directory
The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. Prior to version 0.14.1, a malicious SecureDrop Server could obtain code execution on the SecureDrop Client virt