github.com/gtsteffaniak/filebrowser/backend vulnerabilities (Go)

7 vulnerabilities.

• github.com/gtsteffaniak/filebrowser/backend Go FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory CVE-2026-116682 Fix available 8.6 HighOctober 27, 2026
• github.com/gtsteffaniak/filebrowser/backend Go FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files CVE-2026-54910 Fix available 7.7 HighJuly 20, 2026
• github.com/gtsteffaniak/filebrowser/backend Go FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory CVE-2026-48777 Fix available 9.3 CriticalMay 22, 2026
• github.com/gtsteffaniak/filebrowser/backend Go FileBrowser Quantum: unauthenticated user share share info CVE-2026-46410 Fix available 8.7 HighMay 19, 2026
• github.com/gtsteffaniak/filebrowser/backend Go FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel CVE-2026-54685 Fix available 5.3 MediumMarch 24, 2026
• github.com/gtsteffaniak/filebrowser/backend Go FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info CVE-2026-30933 Fix available 7.5 HighMarch 9, 2026
• github.com/gtsteffaniak/filebrowser/backend Go FileBrowser Quantum: Password Protection Not Enforced on Shared File Links CVE-2026-27611 Fix available 7.1 HighFebruary 25, 2026