freedomofpress/securedrop
develop@ a66fa4cFixes6
CVEs1
Peak severityHigh
Commits10,965
Regression coverage83.3%
Highlights
Denial of Service: 2 prior fixes. Scrutinize any change in this area.
modules/deaddrop/files/deaddrop/source.py: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authorization Bypass: 1 historical fix(es) link securedrop/journalist.py to Authorization Bypass.
Path Traversal: 1 historical fix(es) link securedrop/source.py to Path Traversal.
Path Traversal: 1 historical fix(es) link modules/deaddrop/files/deaddrop/store.py to Path Traversal.
Last analyzed 30 Sep 2026, 02:51 UTC