PkgSeer

Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/gtsteffaniak/filebrowser/backend FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory High Risk 8.6 9 days ago 10 hours ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend Unknown 11 hours ago 11 hours ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files High Risk 7.7 3 months ago 2 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend Unknown 2 months ago 2 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel Medium Risk 5.3 7 months ago 4 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel in github.com/gtsteffaniak/filebrowser/backend Unknown 7 months ago 4 months ago
github.com/gtsteffaniak/filebrowser FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) Medium Risk 5.4 6 months ago 4 months ago
github.com/gtsteffaniak/filebrowser FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks Medium Risk 6.5 4 months ago 4 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory Critical 9.5 5 months ago 4 months ago
github.com/gtsteffaniak/filebrowser FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks in github.com/gtsteffaniak/filebrowser Unknown 4 months ago 4 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory in github.com/gtsteffaniak/filebrowser/backend Unknown 4 months ago 4 months ago
github.com/gtsteffaniak/filebrowser FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) in github.com/gtsteffaniak/filebrowser Unknown 4 months ago 4 months ago
github.com/gtsteffaniak/filebrowser FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion Critical 9.1 6 months ago 4 months ago
github.com/gtsteffaniak/filebrowser FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion in github.com/gtsteffaniak/filebrowser Unknown 4 months ago 4 months ago
github.com/gtsteffaniak/filebrowser FileBrowser Quantum: unauthenticated user share share info High Risk 8.0 5 months ago 4 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum: unauthenticated user share share info High Risk 8.0 5 months ago 4 months ago
github.com/gtsteffaniak/filebrowser FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser Unknown 4 months ago 4 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser Unknown 4 months ago 4 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum: Password-Protected Share Bypass via /public/api/share/info High Risk 7.5 8 months ago 6 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum: Password Protection Not Enforced on Shared File Links Medium Risk 6.5 8 months ago 6 months ago
github.com/gtsteffaniak/filebrowser FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse) High Risk 8.9 8 months ago 7 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum: Password-Protected Share Bypass via /public/api/share/info in github.com/gtsteffaniak/filebrowser/backend Unknown 7 months ago 7 months ago
github.com/gtsteffaniak/filebrowser FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse) in github.com/gtsteffaniak/filebrowser Unknown 7 months ago 7 months ago
github.com/gtsteffaniak/filebrowser/backend FileBrowser Quantum: Password Protection Not Enforced on Shared File Links in github.com/gtsteffaniak/filebrowser/backend Unknown 8 months ago 8 months ago
Data courtesy of OSV.dev
Page 1