github.com/gtsteffaniak/filebrowser
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) | github.com/gtsteffaniak/filebrowser | Go | Medium | Fix reported | |
| FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks | github.com/gtsteffaniak/filebrowser | Go | Medium | Fix reported | |
| FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion | github.com/gtsteffaniak/filebrowser | Go | Critical | Fix reported | |
| FileBrowser Quantum: unauthenticated user share share info | github.com/gtsteffaniak/filebrowser/backendgithub.com/gtsteffaniak/filebrowser | Go | High | Fix reported | |
| FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse) | github.com/gtsteffaniak/filebrowser | Go | High | Fix reported |