Vulnerability GHSA-3jmg-p96m-m328
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 8.0
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
5 months ago
May 19, 2026 at 08:14 PM UTC
FileBrowser Quantum: unauthenticated user share share info
<1.2.1-stable.0.20260514154726-1802e1281135
<1.2.1-stable.0.20260514154726-1802e1281135
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
11 hours ago
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend
<0.0.0-20260814233832-4126edeb07a0 GO-2026-6870
<0.0.0-20260814233832-4126edeb07a0 GO-2026-6870
High Risk
9 days ago
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
<0.0.0-20260814233832-4126edeb07a0 GHSA-mgqf-5mf5-prfj
<0.0.0-20260814233832-4126edeb07a0 GHSA-mgqf-5mf5-prfj
Unknown
2 months ago
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend
<0.0.0-20260608182036-f3f4bbe80cb5 GO-2026-6164
<0.0.0-20260608182036-f3f4bbe80cb5 GO-2026-6164
High Risk
3 months ago
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
<0.0.0-20260608182036-f3f4bbe80cb5 GHSA-vvp7-h4fj-m28w
<0.0.0-20260608182036-f3f4bbe80cb5 GHSA-vvp7-h4fj-m28w
Unknown
4 months ago
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks in github.com/gtsteffaniak/filebrowser
* GO-2026-5776
* GO-2026-5776
Timeline
Published
5 months ago
May 19, 2026 at 08:14 PM UTC
Fixed (v0.0.0-20260514154726-1802e1281135)
5 months ago
May 14, 2026 at 03:47 PM UTC
Last Modified
4 months ago
June 25, 2026 at 06:56 PM UTC