Go/github.com/filebrowser/filebrowser/v2 CVE-2026-32759: high 8.1, EPSS 1.98%

File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.33.8 or later.

go get github.com/filebrowser/filebrowser/v2@v2.33.8

Affected

Fixed versions

Sources

• osv: GHSA-ffx7-75gc-jg7c
• nvd: CVE-2026-32759
• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-ffx7-75gc-jg7c
• https://github.com/filebrowser/filebrowser/issues/5199
• https://github.com/filebrowser/filebrowser

CVE-2026-32759 · published 2026-03-16T20:43:29Z · modified 2026-06-09T12:00:12.377399390Z · JSON