{"id":"GHSA-3jmg-p96m-m328","revision":"cb10e1f7e2354313a744bb0b2fab1c44","records":[{"revision":"cb10e1f7e2354313a744bb0b2fab1c44","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-3jmg-p96m-m328","aliases":["CVE-2026-46410","GO-2026-5089"],"title":"FileBrowser Quantum: unauthenticated user share share info ","description":"### Impact\nSome sensitive info -- such as source and path can get exposed.\n\n### Patches\nUpdate to the latest version\n\n### Workarounds\nno","state":0,"publishedAt":"2026-05-19T20:14:12+00:00","modifiedAt":"2026-06-25T18:56:36.4913455+00:00","affected":[{"ecosystem":"Go","name":"github.com/gtsteffaniak/filebrowser/backend","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260514154726-1802e1281135"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/gtsteffaniak/filebrowser","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.2.1-stable.0.20260514154726-1802e1281135"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V4","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-3jmg-p96m-m328","https://github.com/gtsteffaniak/filebrowser/commit/1802e1281135cba83eb4acd86b58293fe121e2a5","https://github.com/gtsteffaniak/filebrowser"],"sourceUrl":"https://github.com/advisories/GHSA-3jmg-p96m-m328","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-3jmg-p96m-m328","identifiers":["GHSA-3jmg-p96m-m328","CVE-2026-46410","GO-2026-5089"]},"retained":false,"historicalAffected":[]}],"coverage":[]}