id: PYSEC-2022-43
details: OnionShare is an open source tool that lets you securely and anonymously
  share files, host websites, and chat with friends using the Tor network. In affected
  versions anyone with access to the chat environment can write messages disguised
  as another chat participant.
affected:
- package:
    name: onionshare-cli
    ecosystem: PyPI
    purl: pkg:pypi/onionshare-cli
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: "2.5"
  versions:
  - "2.3"
  - 2.3.1
  - 2.3.2
  - 2.3.3
references:
- type: ADVISORY
  url: https://github.com/onionshare/onionshare/security/advisories/GHSA-gjj5-998g-v36v
- type: WEB
  url: https://github.com/onionshare/onionshare/releases/tag/v2.5
aliases:
- CVE-2022-21692
- GHSA-gjj5-998g-v36v
modified: "2022-03-09T00:16:43.273792Z"
published: "2022-01-18T23:15:00Z"