{"action":"Upgrade github.com/gtsteffaniak/filebrowser/backend to 0.0.0-20260221163904-dbcfba993b85 or later.","affected":[{"introduced":"0"}],"component":"github.com/gtsteffaniak/filebrowser/backend","cve_ids":["CVE-2026-27611"],"ecosystem":"Go","epss":0.00366,"exploited":false,"fixed_versions":["0.0.0-20260221163904-dbcfba993b85"],"ghsa_id":"GHSA-8vrh-3pm2-v4v6","id":"tcs_01M5KF4E4NJ64CPKX9FSAH18E1","modified_at":"2026-05-05T15:55:59.579703Z","published_at":"2026-02-25T16:00:49Z","references":["https://osv.dev/vulnerability/GHSA-8vrh-3pm2-v4v6","https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-8vrh-3pm2-v4v6","https://nvd.nist.gov/vuln/detail/CVE-2026-27611","https://github.com/gtsteffaniak/filebrowser/commit/a8c9b9419ec530568991a2f72cec4ed263f99e3c","https://github.com/gtsteffaniak/filebrowser/commit/c51b0ee9738fa4599b409f47c5bf820ef31b4fe1","https://github.com/gtsteffaniak/filebrowser","https://pkg.go.dev/vuln/GO-2026-4546"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8vrh-3pm2-v4v6","url":"https://osv.dev/vulnerability/GHSA-8vrh-3pm2-v4v6"}],"summary":"FileBrowser Quantum: Password Protection Not Enforced on Shared File Links"}