Go/github.com/gtsteffaniak/filebrowser CVE-2026-44542: critical 9.1, EPSS 0.60%

FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion

Action: Upgrade github.com/gtsteffaniak/filebrowser to 0.0.0-20260501183844-112740bdd41d or later.

go get github.com/gtsteffaniak/filebrowser@v0.0.0-20260501183844-112740bdd41d

Affected

Fixed versions

Sources

• osv: GHSA-fwj3-42wh-8673
• https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-fwj3-42wh-8673
• https://nvd.nist.gov/vuln/detail/CVE-2026-44542
• https://github.com/gtsteffaniak/filebrowser/commit/112740bdd41de7d5eb01e13ba49d406bfc463f69
• https://github.com/gtsteffaniak/filebrowser

CVE-2026-44542 · published 2026-05-07T03:28:06Z · modified 2026-06-25T19:56:38.896688055Z · JSON