Meet Corgea at Black Hat, BSides Las Vegas & DEF CON
Start for Free
go

github.com/gtsteffaniak/filebrowser

View on go registry
10 Total advisories
10 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 5.4
Go

GO-2026-5511

FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header)
MEDIUM 6.5
Go

GO-2026-5776

FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
UNKNOWN
Go

GHSA-r4v7-6wcg-ghj5

FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks in github.com/gtsteffaniak/filebrowser
UNKNOWN
Go

GHSA-mmpx-jh39-wrv6

FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) in github.com/gtsteffaniak/filebrowser
CRITICAL 9.1
Go

CVE-2026-44542

FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion
UNKNOWN
Go

CVE-2026-44542

FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion in github.com/gtsteffaniak/filebrowser
UNKNOWN
Go

CVE-2026-46410

FileBrowser Quantum: unauthenticated user share share info

UNKNOWN
Go

CVE-2026-46410

FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser
HIGH 8.9
Go

CVE-2026-30934

FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse)
UNKNOWN
Go

CVE-2026-30934

FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse) in github.com/gtsteffaniak/filebrowser

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes