github.com/gtsteffaniak/filebrowser

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.7

CVE-2026-46410

FileBrowser Quantum: unauthenticated user share share info

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available.

gtsteffaniak filebrowser github.com/gtsteffaniak/filebrowser/backend github.com/gtsteffaniak/filebrowser Go

Jul 20, 2026
High 8.9

CVE-2026-30934

FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse)

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, Stored XSS is possible via share metadata fields (e.g., title, description) that are rendered into HTML for /public/share/<hash> without context-aware es…

gtsteffaniak filebrowser github.com/gtsteffaniak/filebrowser Go

Mar 10, 2026