Go/github.com/filebrowser/filebrowser/v2 CVE-2026-35604: high, EPSS 0.43%

File Browser share links remain accessible after Share/Download permissions are revoked

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.63.1 or later.

go get github.com/filebrowser/filebrowser/v2@v2.63.1

Affected

Fixed versions

Sources

• osv: GHSA-v9w4-gm2x-6rvf
• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-v9w4-gm2x-6rvf
• https://nvd.nist.gov/vuln/detail/CVE-2026-35604
• https://github.com/filebrowser/filebrowser/pull/5888
• https://github.com/filebrowser/filebrowser

CVE-2026-35604 · published 2026-04-08T00:04:59Z · modified 2026-06-25T23:11:03.368603847Z · JSON