PkgSeer

Vulnerability GO-2026-5591

Unknown

4 months ago

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260518193514-28e9b81e438e

Summary

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory in github.com/gtsteffaniak/filebrowser/backend

Details

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory in github.com/gtsteffaniak/filebrowser/backend

References

ADVISORY — github.com

Related Vulnerabilities

Other vulnerabilities affecting the same packages

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260814233832-4126edeb07a0 GO-2026-6870

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

<0.0.0-20260814233832-4126edeb07a0 GHSA-mgqf-5mf5-prfj

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260608182036-f3f4bbe80cb5 GO-2026-6164

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files

<0.0.0-20260608182036-f3f4bbe80cb5 GHSA-vvp7-h4fj-m28w

FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser

<0.0.0-20260514154726-1802e1281135 GO-2026-5089

View all vulnerabilities for these packages

Impacted packages

github.com/gtsteffaniak/filebrowser/backend

Timeline

Published

4 months ago

Fixed (v0.0.0-20260518193514-28e9b81e438e)

5 months ago

Last Modified

4 months ago