Globaleaks is a whistleblower submission and document-collection platform designed to enable secure anonymous reporting; its vulnerability profile centers narrowly on the Globaleaks application itself. The observed weakness classes reflect typical web-application input-handling concerns, centered on improper input validation, which is the recurring structural weakness for this focused platform. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Globaleaks over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-33284MEDIUM GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support r | Mar 27, 2026 | 4.3 | 16 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Globaleaks.
Media articles that mention a CVE ID that affects a product developed by Globaleaks — matched by CVE ID, not by vendor name.