CVE-2026-54685
2 advisories.
Go/github.com/gtsteffaniak/filebrowser/backend CVE-2026-54685: medium 5.3, EPSS 0.47%
FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel
Action: Upgrade github.com/gtsteffaniak/filebrowser/backend to 0.0.0-20260317230626-af08800667b8 or later.
go get github.com/gtsteffaniak/filebrowser/backend@v0.0.0-20260317230626-af08800667b8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260317230626-af08800667b8 |
Sources
- osv: GHSA-7789-65hx-f26w
- https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-7789-65hx-f26w
- https://github.com/gtsteffaniak/filebrowser/commit/af08800667b874620edc6f44c3e2e64fec7abd85
- https://github.com/gtsteffaniak/filebrowser
- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.3.2-beta
CVE-2026-54685 · published · modified · JSON
Go/github.com/gtsteffaniak/filebrowser/backend CVE-2026-54685: unknown, EPSS 0.47%
FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel in github.com/gtsteffaniak/filebrowser/backend
Action: Upgrade github.com/gtsteffaniak/filebrowser/backend to 0.0.0-20260317230626-af08800667b8 or later.
go get github.com/gtsteffaniak/filebrowser/backend@v0.0.0-20260317230626-af08800667b8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260317230626-af08800667b8 |
Sources
- osv: GO-2026-4820
- https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-7789-65hx-f26w
- https://github.com/gtsteffaniak/filebrowser/commit/af08800667b874620edc6f44c3e2e64fec7abd85
- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.3.2-beta
CVE-2026-54685 · published · modified · JSON