gtsteffaniak has 4 CVEs on record. 1 was published in the last 90 days. The median CVSS is 7.1 (high). Most affected products: github.com/gtsteffaniak/filebrowser/backend (3), github.com/gtsteffaniak/filebrowser (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.1
- Publish → KEV
- —
- Last 90 days
- 1 prev 2
Products
- github.com/gtsteffaniak/filebrowser/backend 3
- github.com/gtsteffaniak/filebrowser 1
Worst active — by depth score
CVE-2026-116682High· 8.6FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory47CVE-2026-54910High· 7.7FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files42GHSA-r4v7-6wcg-ghj5Medium· 6.5FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks36CVE-2026-54685Medium· 5.3FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel29
gtsteffaniak vulnerabilities
CVEs affecting gtsteffaniak, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-116682High· 8.6FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
CVE-2026-54910High· 7.7FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
GHSA-r4v7-6wcg-ghj5Medium· 6.5FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
CVE-2026-54685Medium· 5.3FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel
FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel