PT-2026-6513 · Go · Github.Com/Filebrowser/Filebrowser+1

Published 2026-02-03 · Updated 2026-02-03

OSV

File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login in github.com/filebrowser/filebrowser

Related Identifiers

GO-2026-4344

Affected Products

Github.Com/Filebrowser/Filebrowser

Github.Com/Filebrowser/Filebrowser/V2

References · 4

• https://osv.dev/vulnerability/GO-2026-4344 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23849 · Security Note
• https://github.com/filebrowser/filebrowser/commit/24781badd413ee20333aba5cce1919d676e01889 · Note
• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-43mm-m3h2-3prc · Note