Approved changes feed: RSS · Atom

cpe:2.3:a:vessel9817:onion-site-template:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVessel9817 (b4e6d155-d735-5e8b-9bba-a3ad646e8eec)
ProductOnion Site Template (4b153fdd-c62c-55ec-b7ed-f52a9fc44784)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54872 vulnerable 2026-06-08 07:33:13.512012 onion-site-template tor Secrets Baked Into Image
onion-site-template is a complete, scalable tor hidden service self-hosting sample. Versions which include commit 3196bd89 contain a baked-in tor image if the secrets were copied from an existing onion domain. A website could be compromised if a user shared the baked-in image, or if someone were able to acquire access to the user's device outside of a containerized environment. This is fixed by commit bc9ba0fd.
Published: 2025-08-05T23:40:46.900Z
Updated: 2025-08-06T20:33:38.316Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.