CVE-2026-29188

3 advisories.

Go/github.com/filebrowser/filebrowser/v2 CVE-2026-29188: critical 9.1

File Browser's TUS Delete Endpoint Bypasses Delete Permission Check

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.61.1 or later.

go get github.com/filebrowser/filebrowser/v2@v2.61.1

introduced	fixed	last affected
0	2.61.1	-

2.61.1

CVE-2026-29188 · published 2026-03-04T22:38:01Z · modified 2026-03-23T04:56:25.255808965Z · JSON

File Browser's TUS Delete Endpoint Bypasses Delete Permission Check in github.com/filebrowser/filebrowser

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2026-29188 · published 2026-03-10T18:28:10Z · modified 2026-03-23T04:53:14.531114Z · JSON

File Browser's TUS Delete Endpoint Bypasses Delete Permission Check in github.com/filebrowser/filebrowser

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.61.1 or later.

go get github.com/filebrowser/filebrowser/v2@v2.61.1

introduced	fixed	last affected
0	2.61.1	-

2.61.1

CVE-2026-29188 · published 2026-03-10T18:28:10Z · modified 2026-03-23T04:53:14.531114Z · JSON