Start for Free
go

github.com/gtsteffaniak/filebrowser/backend

View on go registry
14 Total advisories
14 Vulnerabilities
0 Malware

Dependency scanning

Check whether github.com/gtsteffaniak/filebrowser/backend is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 8.6
Go

CVE-2026-116682

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
UNKNOWN
Go

CVE-2026-116682

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory in github.com/gtsteffaniak/filebrowser/backend
HIGH 7.7
Go

CVE-2026-54910

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
UNKNOWN
Go

CVE-2026-54910

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend
UNKNOWN
Go

CVE-2026-54685

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel in github.com/gtsteffaniak/filebrowser/backend
MEDIUM 5.3
Go

CVE-2026-54685

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel
UNKNOWN
Go

CVE-2026-48777

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory
UNKNOWN
Go

CVE-2026-48777

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory in github.com/gtsteffaniak/filebrowser/backend
UNKNOWN
Go

CVE-2026-46410

FileBrowser Quantum: unauthenticated user share share info

UNKNOWN
Go

CVE-2026-46410

FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser
HIGH 7.5
Go

CVE-2026-30933

FileBrowser Quantum: Password-Protected Share Bypass via /public/api/share/info
MEDIUM 6.5
Go

CVE-2026-27611

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

UNKNOWN
Go

CVE-2026-30933

FileBrowser Quantum: Password-Protected Share Bypass via /public/api/share/info in github.com/gtsteffaniak/filebrowser/backend
UNKNOWN
Go

CVE-2026-27611

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links in github.com/gtsteffaniak/filebrowser/backend

Browse more Go advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes