Go/github.com/gtsteffaniak/filebrowser CVE-2026-44542: critical 9.1, EPSS 0.52%

FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion in github.com/gtsteffaniak/filebrowser

Action: Upgrade github.com/gtsteffaniak/filebrowser to 0.0.0-20260501183844-112740bdd41d or later.

go get github.com/gtsteffaniak/filebrowser@v0.0.0-20260501183844-112740bdd41d

Affected

Fixed versions

Sources

• osv: GO-2026-5383
• nvd: CVE-2026-44542
• https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-fwj3-42wh-8673
• https://github.com/gtsteffaniak/filebrowser/commit/112740bdd41de7d5eb01e13ba49d406bfc463f69

CVE-2026-44542 · published 2026-06-25T18:43:19Z · modified 2026-06-25T19:45:36.745347388Z · JSON