Vulnerability GO-2026-5511
Advisory details are being prepared in the background.
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 months ago
June 25, 2026 at 10:34 PM UTC
FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) in github.com/gtsteffaniak/filebrowser
<0.0.0-20260501184955-6bfc3974192e
<0.0.0-20260501184955-6bfc3974192e
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
4 months ago
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks in github.com/gtsteffaniak/filebrowser
* GO-2026-5776
* GO-2026-5776
Unknown
4 months ago
FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion in github.com/gtsteffaniak/filebrowser
<0.0.0-20260501183844-112740bdd41d GO-2026-5383
<0.0.0-20260501183844-112740bdd41d GO-2026-5383
Unknown
4 months ago
FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser
<1.2.1-stable.0.20260514154726-1802e1281135 GO-2026-5089
<1.2.1-stable.0.20260514154726-1802e1281135 GO-2026-5089
Medium Risk
4 months ago
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
<0.0.0-20260522161427-fa5abc8c67f3a GHSA-r4v7-6wcg-ghj5
<0.0.0-20260522161427-fa5abc8c67f3a GHSA-r4v7-6wcg-ghj5
High Risk
5 months ago
FileBrowser Quantum: unauthenticated user share share info
<1.2.1-stable.0.20260514154726-1802e1281135 GHSA-3jmg-p96m-m328
<1.2.1-stable.0.20260514154726-1802e1281135 GHSA-3jmg-p96m-m328
Impacted packages
Timeline
Published
4 months ago
June 25, 2026 at 10:34 PM UTC
Last Modified
4 months ago
June 25, 2026 at 11:01 PM UTC