PkgSeer

Vulnerabilities

Last updated 54 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/filebrowser/filebrowser/v2 File Browser: Trailing-slash directory deletion leaves public shares active for recreated paths Low Risk 3.1 2 hours ago 2 hours ago
github.com/filebrowser/filebrowser/v2 File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login Medium Risk 5.3 9 months ago 2 months ago
github.com/filebrowser/filebrowser/v2 File Browser has a Command Injection via Hook Runner High Risk 7.2 7 months ago 2 months ago
github.com/filebrowser/filebrowser/v2 File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL High Risk 8.1 9 months ago 2 months ago
github.com/filebrowser/filebrowser/v2 File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing High Risk 8.0 1 year ago 2 months ago
github.com/filebrowser/filebrowser/v2 File Browser’s insecure JWT handling can lead to session replay attacks after logout High Risk 8.0 1 year ago 2 months ago
github.com/filebrowser/filebrowser/v2 File Browser vulnerable to insecure password handling Medium Risk 5.9 1 year ago 2 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Command Execution not Limited to Scope High Risk 8.0 1 year ago 2 months ago
github.com/filebrowser/filebrowser/v2 File Browser's password protection of links is bypassable Low Risk 3.1 1 year ago 2 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip) Medium Risk 6.8 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope Medium Risk 6.3 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Colliding username normalization gives two users the same home directory High Risk 8.1 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Share API exposes the password hash and bypass token Low Risk 2.7 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup High Risk 8.2 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Share API exposes the password hash and bypass token in github.com/filebrowser/filebrowser Unknown 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip) in github.com/filebrowser/filebrowser Unknown 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope in github.com/filebrowser/filebrowser Unknown 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup in github.com/filebrowser/filebrowser Unknown 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Colliding username normalization gives two users the same home directory in github.com/filebrowser/filebrowser Unknown 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Authentication Bypass via Proxy Auth Header Forgery Critical 9.1 4 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE) Critical 9.5 4 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Authentication Bypass via Proxy Auth Header Forgery in github.com/filebrowser/filebrowser Unknown 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE) in github.com/filebrowser/filebrowser Unknown 3 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser has a DoS Vulnerability via Public Login API Medium Risk 6.5 5 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path High Risk 8.4 5 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix High Risk 8.0 5 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser has incorrect access control for public directory shares via rule path rebasing High Risk 7.5 5 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser has a Command Execution Allowlist Bypass via Shell Metacharacter Injection High Risk 8.0 5 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands High Risk 8.1 7 months ago 3 months ago
github.com/filebrowser/filebrowser/v2 File Browser vulnerable to Stored Cross-site Scripting via text/template branding injection Medium Risk 6.9 7 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser: FilePath traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames Medium Risk 6.0 5 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution High Risk 8.1 7 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser share links remain accessible after Share/Download permissions are revoked High Risk 8.0 7 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser vulnerable to Stored Cross-site Scripting via text/template branding injection in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser share links remain accessible after Share/Download permissions are revoked in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser has a DoS Vulnerability via Public Login API in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser has a Command Injection via Hook Runner in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser has incorrect access control for public directory shares via rule path rebasing in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser: FilePath traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser has a Command Execution Allowlist Bypass via Shell Metacharacter Injection in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file High Risk 7.6 7 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check Medium Risk 6.0 7 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser has an access rule bypass via HasPrefix without trailing separator in path matching Medium Risk 6.0 7 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser has an access rule bypass via HasPrefix without trailing separator in path matching in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
github.com/filebrowser/filebrowser/v2 File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path in github.com/filebrowser/filebrowser Unknown 4 months ago 4 months ago
Data courtesy of OSV.dev
Page 1