~ / search / GHSA-3jmg-p96m-m328

GHSA-3jmg-p96m-m328

FileBrowser Quantum: unauthenticated user share share info

Source: GitHub Advisory Database (reviewed) High CVE-2026-46410

Packages

EcosystemPackageAffectedFixed in
Go github.com/gtsteffaniak/filebrowser/backend < 0.0.0-20260514154726-1802e1281135 0.0.0-20260514154726-1802e1281135
Go github.com/gtsteffaniak/filebrowser < 1.2.1-stable.0.20260514154726-1802e1281135 1.2.1-stable.0.20260514154726-1802e1281135

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Some sensitive info -- such as source and path can get exposed. ### Patches Update to the latest version ### Workarounds no

References

External links from the advisory. They lead to third-party sites.