CVE-2026-54910
2 advisories.
Go/github.com/gtsteffaniak/filebrowser/backend CVE-2026-54910: high 7.7, EPSS 0.46%
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
Action: Upgrade github.com/gtsteffaniak/filebrowser/backend to 0.0.0-20260608182036-f3f4bbe80cb5 or later.
go get github.com/gtsteffaniak/filebrowser/backend@v0.0.0-20260608182036-f3f4bbe80cb5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260608182036-f3f4bbe80cb5 |
Sources
- osv: GHSA-vvp7-h4fj-m28w
- https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w
- https://nvd.nist.gov/vuln/detail/CVE-2026-54910
- https://github.com/gtsteffaniak/filebrowser/pull/2524
- https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a
- https://github.com/gtsteffaniak/filebrowser
- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta
CVE-2026-54910 · published · modified · JSON
Go/github.com/gtsteffaniak/filebrowser/backend CVE-2026-54910: unknown, EPSS 0.46%
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files in github.com/gtsteffaniak/filebrowser/backend
Action: Upgrade github.com/gtsteffaniak/filebrowser/backend to 0.0.0-20260608182036-f3f4bbe80cb5 or later.
go get github.com/gtsteffaniak/filebrowser/backend@v0.0.0-20260608182036-f3f4bbe80cb5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260608182036-f3f4bbe80cb5 |
Sources
- osv: GO-2026-6164
- https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w
- https://nvd.nist.gov/vuln/detail/CVE-2026-54910
- https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a
- https://github.com/gtsteffaniak/filebrowser/pull/2524
- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta
CVE-2026-54910 · published · modified · JSON