tocsin

CVE-2026-48777

2 advisories.

Go/github.com/gtsteffaniak/filebrowser/backend CVE-2026-48777: critical

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory

Action: Upgrade github.com/gtsteffaniak/filebrowser/backend to 0.0.0-20260518193514-28e9b81e438e or later.

go get github.com/gtsteffaniak/filebrowser/backend@v0.0.0-20260518193514-28e9b81e438e

Affected

introducedfixedlast affected
0--

Fixed versions

0.0.0-20260518193514-28e9b81e438e

Sources

CVE-2026-48777 · published · modified · JSON

Go/github.com/gtsteffaniak/filebrowser/backend CVE-2026-48777: unknown

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory in github.com/gtsteffaniak/filebrowser/backend

Action: Upgrade github.com/gtsteffaniak/filebrowser/backend to 0.0.0-20260518193514-28e9b81e438e or later.

go get github.com/gtsteffaniak/filebrowser/backend@v0.0.0-20260518193514-28e9b81e438e

Affected

introducedfixedlast affected
0--

Fixed versions

0.0.0-20260518193514-28e9b81e438e

Sources

CVE-2026-48777 · published · modified · JSON