PkgSeer

Vulnerability GO-2026-6870

Unknown

9 hours ago

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260814233832-4126edeb07a0

Summary

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend

Details

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

<0.0.0-20260814233832-4126edeb07a0 GHSA-mgqf-5mf5-prfj

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260608182036-f3f4bbe80cb5 GO-2026-6164

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files

<0.0.0-20260608182036-f3f4bbe80cb5 GHSA-vvp7-h4fj-m28w

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory in github.com/gtsteffaniak/filebrowser/backend

<0.0.0-20260518193514-28e9b81e438e GO-2026-5591

FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser

<0.0.0-20260514154726-1802e1281135 GO-2026-5089

View all vulnerabilities for these packages

Impacted packages

github.com/gtsteffaniak/filebrowser/backend

Timeline

Published

9 hours ago

Fixed (v0.0.0-20260814233832-4126edeb07a0)

2 months ago

Last Modified

8 hours ago