VDB

GO-2026-4344

GO-2026-4344 PUBLISHED

File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login in github.com/filebrowser/filebrowser

Affected Products

VendorProductVersions
github.comfilebrowser/filebrowser0
github.comfilebrowser/filebrowser/v20
chainguardfilebrowser0
wolfifilebrowser0

Timeline

  • Feb 3, 2026 CVE Published
  • Feb 4, 2026 CVE Updated
  • May 18, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›