Is github.com/gtsteffaniak/filebrowser affected by CVE-2026-44542?

Go github.com/gtsteffaniak/filebrowser is affected in <0.0.0-20260501183844-112740bdd41d.

Is CVE-2026-44542 being exploited?

Not on the CISA KEV list. EPSS exploit probability is 0.4%.

critical

CVE-2026-44542

Q: Is CVE-2026-44542 being exploited?

Not on the CISA KEV list. EPSS exploit probability is 0.4%.

Go · github.com/gtsteffaniak/filebrowser

Summary

FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion

Severity: critical
EPSS: 0.4% (p35)
Also known as: GHSA-fwj3-42wh-8673
Published: 2026-05-07

References

https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-fwj3-42wh-8673
https://nvd.nist.gov/vuln/detail/CVE-2026-44542
https://github.com/gtsteffaniak/filebrowser/commit/112740bdd41de7d5eb01e13ba49d406bfc463f69

Related advisories

CVE-2026-46410 — high · Go/github.com/gtsteffaniak/filebrowser
GHSA-mmpx-jh39-wrv6 — medium · Go/github.com/gtsteffaniak/filebrowser
CVE-2026-30934 — medium · Go/github.com/gtsteffaniak/filebrowser

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.