PkgSeer

Vulnerability GHSA-vvp7-h4fj-m28w

Advisory details are being prepared in the background.

GO-2026-6164

High Risk

3 months ago

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files

<0.0.0-20260608182036-f3f4bbe80cb5

Related Vulnerabilities

Other vulnerabilities affecting the same packages

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260814233832-4126edeb07a0 GO-2026-6870

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

<0.0.0-20260814233832-4126edeb07a0 GHSA-mgqf-5mf5-prfj

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260608182036-f3f4bbe80cb5 GO-2026-6164

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260518193514-28e9b81e438e GO-2026-5591

FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser

<0.0.0-20260514154726-1802e1281135 GO-2026-5089

View all vulnerabilities for these packages

Impacted packages

github.com/gtsteffaniak/filebrowser/backend

Timeline

Published

3 months ago

Fixed (v0.0.0-20260608182036-f3f4bbe80cb5)

5 months ago

Last Modified

2 months ago