Directory Traversal

github.com/gtsteffaniak/filebrowser is vulnerable to Directory Traversal. The vulnerability is due to improper sanitization of attacker-controlled path input before path validation, which allows an attacker to use traversal sequences to delete arbitrary files outside the intended shared directory...

CVE-2026-44542 FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable and 1.3.9-beta, attacker-controlled path input is joined with a trusted base path prior to sanitization, allowing traversal sequences e.g., ../ to escape the intended shared directory. As a result, an...

EUVD-2026-30344

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable and 1.3.9-beta, attacker-controlled path input is joined with a trusted base path prior to sanitization, allowing traversal sequences e.g., ../ to escape the intended shared directory. As a result, an...

CVE-2026-44542

CVE-2026-44542 affects FileBrowser Quantum. An attacker-controlled path input is joined with a trusted base path before sanitization, enabling path traversal (e.g., ../) to escape the shared directory. An unauthenticated attacker with a valid public share hash that has delete permissions can dele...

CVE-2026-44542 FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable and 1.3.9-beta, attacker-controlled path input is joined with a trusted base path prior to sanitization, allowing traversal sequences e.g., ../ to escape the intended shared directory. As a result, an...

FileBrowser Quantum 路径遍历漏洞

FileBrowser Quantum is a file manager developed by Graham Steffaniak. Versions prior to 1.3.1-stable and 1.3.9-beta contained a path traversal vulnerability. This vulnerability stemmed from the concatenation of trusted base paths before path cleaning, which could lead to directory traversal attac...

CVE-2026-44542: Improper Limitation of a Pathname to a Restricted Directory

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable and 1.3.9-beta, attacker-controlled path input is joined with a trusted base path prior to sanitization, allowing traversal sequences e.g., ../ to escape the intended shared directory. As a result, an...

FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header)

Summary FileBrowser Quantum serves inline SVG files without a Content-Security-Policy header, allowing embedded JavaScript in SVG files to execute when accessed via public share links. Verified on v1.3.0-stable. Affected product - Product: FileBrowser Quantum gtsteffaniak/filebrowser - Verified...

GHSA-MMPX-JH39-WRV6 FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header)

Summary FileBrowser Quantum serves inline SVG files without a Content-Security-Policy header, allowing embedded JavaScript in SVG files to execute when accessed via public share links. Verified on v1.3.0-stable. Affected product - Product: FileBrowser Quantum gtsteffaniak/filebrowser - Verified...

FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion

Summary Attacker-controlled path input is joined with a trusted base path prior to sanitization, allowing traversal sequences e.g., ../ to escape the intended shared directory. As a result, an unauthenticated attacker possessing a valid public share hash with delete permissions enabled can delete...

CVE-2026-35585 vulnerabilities

Vulnerabilities for packages: filebrowser...

GHSA-JVPW-637P-H3PW vulnerabilities

Vulnerabilities for packages: filebrowser...

GHSA-JVPW-637P-H3PW vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-35585 vulnerabilities

Vulnerabilities for packages: filebrowser...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: podman, bento, tkn, dask-gateway, pulumi-language-java, cerbos, buf, kargo, kubescape, nerdctl, helm-set-status, k8ssandra-client, nuclei, vendir, bom, ipfs-cluster, cosign, neuvector-scanner, nsc, envconsul, trivy, rancher, kind, rook, pulumi-language-yaml,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, buf, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, lazygit, nuclei, mcp-grafana, yunikorn-k8shim, mkcert, crossplane-provider-azure-storage, nsc, percona-server-mongodb-operator, configmap-reload, ingress-nginx-controller...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: delve, bento, vexctl, tkn, dask-gateway, nginx-prometheus-exporter, cerbos, kargo, kubescape, kyverno-policy-reporter-ui, nerdctl, pulumi-language-java, helm-set-status, k8ssandra-client, nuclei, cloud-provider-vsphere, dataplaneapi, boring-registry, bom, mcp-grafana...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: delve, bento, vexctl, tkn, dask-gateway, nginx-prometheus-exporter, cerbos, kargo, kubescape, kyverno-policy-reporter-ui, nerdctl, pulumi-language-java, helm-set-status, k8ssandra-client, nuclei, cloud-provider-vsphere, dataplaneapi, boring-registry, bom, mcp-grafana...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: buildah-fips, nsc, argo-cd, cerbos, sonobuoy, aws-flb-firehose-fips, argo-workflows, docker-cli-fips, beats, tofu-controller, flux-source-watcher-fips, pulumi-language-java, opa-envoy, nemo, coredns-fips, cloud-provider-azure, kubernetes-fips, witness, istio,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: buildah-fips, nsc, argo-cd, cerbos, sonobuoy, aws-flb-firehose-fips, argo-workflows, docker-cli-fips, beats, tofu-controller, flux-source-watcher-fips, pulumi-language-java, opa-envoy, nemo, coredns-fips, cloud-provider-azure, kubernetes-fips, witness, istio,...