- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 7 · 1 critical, 5 high, 1 medium
- Registry
- pkg.go.dev
Advisories 7
- CVE-2026-116682High 8.6
FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory
Affected: fixed in 0.0.0-20260814233832-4126edeb07a0.
- CVE-2026-54910High 7.7
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
Affected: fixed in 0.0.0-20260608182036-f3f4bbe80cb5.
- CVE-2026-54685Medium 5.3
FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel
Affected: fixed in 0.0.0-20260317230626-af08800667b8.
- CVE-2026-46410High 8.7
FileBrowser Quantum: unauthenticated user share share info
Affected: fixed in 0.0.0-20260514154726-1802e1281135.
- CVE-2026-48777Critical 9.3
FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory
Affected: fixed in 0.0.0-20260518193514-28e9b81e438e.
- CVE-2026-30933High 7.5
FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info
Affected: fixed in 0.0.0-20260307130210-09713b32a5f6.
- CVE-2026-27611High 7.1
FileBrowser Quantum: Password Protection Not Enforced on Shared File Links
Affected: fixed in 0.0.0-20260221163904-dbcfba993b85.