{"id":"GO-2026-4820","revision":"7d618b425ea3417b89a7e93f1c5e8967","records":[{"revision":"7d618b425ea3417b89a7e93f1c5e8967","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-4820","aliases":["CVE-2026-54685","GHSA-7789-65hx-f26w"],"title":"FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel in github.com/gtsteffaniak/filebrowser/backend","description":"FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel in github.com/gtsteffaniak/filebrowser/backend","state":0,"publishedAt":"2026-03-26T20:33:02+00:00","modifiedAt":"2026-07-08T17:56:10.9579942+00:00","affected":[{"ecosystem":"Go","name":"github.com/gtsteffaniak/filebrowser/backend","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260317230626-af08800667b8"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-7789-65hx-f26w","https://github.com/gtsteffaniak/filebrowser/commit/af08800667b874620edc6f44c3e2e64fec7abd85","https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.3.2-beta"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-4820","license":"OSV · upstream source license applies","key":"osv:GO-2026-4820","identifiers":["GO-2026-4820","CVE-2026-54685","GHSA-7789-65hx-f26w"]},"retained":false,"historicalAffected":[]}],"coverage":[]}