Go/github.com/gtsteffaniak/filebrowser: unknown
FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) in github.com/gtsteffaniak/filebrowser
Action: Upgrade github.com/gtsteffaniak/filebrowser to 0.0.0-20260501184955-6bfc3974192e or later.
go get github.com/gtsteffaniak/filebrowser@v0.0.0-20260501184955-6bfc3974192eAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260501184955-6bfc3974192e |
Sources
- osv: GO-2026-5511
- https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-mmpx-jh39-wrv6
- https://github.com/gtsteffaniak/filebrowser/commit/6bfc3974192e954f71cc5d1cd04baaaec3b76383
published · modified · JSON