SecureDrop 2.16.0 was released on June 24, 2026. It includes fixes and performance improvements for the v2 API, a non-critical security fix addressing journalist session corruption as described in CVE-2026-50000, improvements to login throttling logic, and miscellaneous other fixes and dependency updates.
Tracked CVEs
- CVE-2026-50000
