{"id":"GO-2026-5383","revision":"ca5da7a82c2b4e53abb0b9bd4b583450","records":[{"revision":"ca5da7a82c2b4e53abb0b9bd4b583450","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5383","aliases":["CVE-2026-44542","GHSA-fwj3-42wh-8673"],"title":"FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion in github.com/gtsteffaniak/filebrowser","description":"FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion in github.com/gtsteffaniak/filebrowser","state":0,"publishedAt":"2026-06-25T18:43:19+00:00","modifiedAt":"2026-06-25T19:45:36.7453474+00:00","affected":[{"ecosystem":"Go","name":"github.com/gtsteffaniak/filebrowser","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260501183844-112740bdd41d"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-fwj3-42wh-8673","https://nvd.nist.gov/vuln/detail/CVE-2026-44542","https://github.com/gtsteffaniak/filebrowser/commit/112740bdd41de7d5eb01e13ba49d406bfc463f69"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5383","license":"OSV · upstream source license applies","key":"osv:GO-2026-5383","identifiers":["GO-2026-5383","CVE-2026-44542","GHSA-fwj3-42wh-8673"]},"retained":false,"historicalAffected":[]}],"coverage":[]}