github.com/gtsteffaniak/filebrowser/backend vulnerabilities
CVEs whose affected-version data names the github.com/gtsteffaniak/filebrowser/backend package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-116682High· 8.6FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
▾ Twilightgtsteffaniak · github.com/gtsteffaniak/filebrowser/backendEPSS 0.54%via OSV
CVE-2026-54910High· 7.7FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
▾ Twilightgtsteffaniak · github.com/gtsteffaniak/filebrowser/backendEPSS 0.38%via GHSA
CVE-2026-54685Medium· 5.3FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel
FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel
▾ Sunlitgtsteffaniak · github.com/gtsteffaniak/filebrowser/backendEPSS 0.34%via OSV