Security
فارسی
All products

github.com/gtsteffaniak/filebrowser/backend

Go · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directoryCVE-2026-116682 · GHSA-MGQF-5MF5-PRFJVersion ranges need review. github.com/gtsteffaniak/filebrowser/backend Go High Fix reported
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary filesCVE-2026-54910 · GHSA-VVP7-H4FJ-M28WVersion ranges need review. github.com/gtsteffaniak/filebrowser/backend Go High Fix reported
FileBrowser Quantum has Username Enumeration via Authentication Timing Side-ChannelCVE-2026-54685 · GHSA-7789-65HX-F26WVersion ranges need review. github.com/gtsteffaniak/filebrowser/backend Go Medium Fix reported
FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directoryCVE-2026-48777 · GHSA-QQQM-5547-774XVersion ranges need review. github.com/gtsteffaniak/filebrowser/backend Go Critical Fix reported
FileBrowser Quantum: unauthenticated user share share info CVE-2026-46410 · GHSA-3JMG-P96M-M328Version ranges need review. github.com/gtsteffaniak/filebrowser/backendgithub.com/gtsteffaniak/filebrowser Go High Fix reported
FileBrowser Quantum: Password-Protected Share Bypass via /public/api/share/infoCVE-2026-30933 · GHSA-525J-95GF-766FVersion ranges need review. github.com/gtsteffaniak/filebrowser/backend Go High Fix reported
FileBrowser Quantum: Password Protection Not Enforced on Shared File Links CVE-2026-27611 · GHSA-8VRH-3PM2-V4V6Version ranges need review. github.com/gtsteffaniak/filebrowser/backend Go High Fix reported