Security Advisory catalog GO-2026-6164 GO-2026-6164 Published
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files Overview Affected History Connections
cve-program · CVE-2026-54910 Published filebrowser Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "gtsteffaniak",
"product": "filebrowser",
"versions": [
{
"version": "< 1.4.3-beta",
"status": "affected"
}
]
}
nvd · CVE-2026-54910 Published No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.
osv · GHSA-vvp7-h4fj-m28w Published github.com/gtsteffaniak/filebrowser/backend Go
SEMVER · introduced 0 → fixed 0.0.0-20260608182036-f3f4bbe80cb5
osv · GO-2026-6164 Published github.com/gtsteffaniak/filebrowser/backend Go
SEMVER · introduced 0 → fixed 0.0.0-20260608182036-f3f4bbe80cb5