CVE-2026-23849 vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-23849

File Browser provides a file managing interface within a specified directory and can be used to upload, delete, preview, rename, and edit files. Prior to version 2.55.0, the JSONAuth. Auth function contains a logic flaw that allows unauthenticated attackers to enumerate valid usernames by measuri...

CVE-2026-23849

creationtimestamp| type| source ---|---|--- 2026-01-18 09:35:49+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-43mm-m3h2-3prc 2026-01-19 22:35:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcspbnap4y2r 2026-01-21...