Vulnerability GO-2026-5089
Advisory details are being prepared in the background.
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 months ago
June 25, 2026 at 06:26 PM UTC
FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser
<1.2.1-stable.0.20260514154726-1802e1281135
<1.2.1-stable.0.20260514154726-1802e1281135
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend
<0.0.0-20260814233832-4126edeb07a0 GO-2026-6870
<0.0.0-20260814233832-4126edeb07a0 GO-2026-6870
High Risk
9 days ago
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
<0.0.0-20260814233832-4126edeb07a0 GHSA-mgqf-5mf5-prfj
<0.0.0-20260814233832-4126edeb07a0 GHSA-mgqf-5mf5-prfj
Unknown
2 months ago
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend
<0.0.0-20260608182036-f3f4bbe80cb5 GO-2026-6164
<0.0.0-20260608182036-f3f4bbe80cb5 GO-2026-6164
High Risk
3 months ago
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
<0.0.0-20260608182036-f3f4bbe80cb5 GHSA-vvp7-h4fj-m28w
<0.0.0-20260608182036-f3f4bbe80cb5 GHSA-vvp7-h4fj-m28w
Unknown
4 months ago
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks in github.com/gtsteffaniak/filebrowser
* GO-2026-5776
* GO-2026-5776
Timeline
Published
4 months ago
June 25, 2026 at 06:26 PM UTC
Fixed (v0.0.0-20260514154726-1802e1281135)
5 months ago
May 14, 2026 at 03:47 PM UTC
Last Modified
4 months ago
June 25, 2026 at 06:45 PM UTC