Package
filebrowser-compat
Component
filebrowser-compat
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
The upstream security advisory states that no fix will be released, so no fixed version is expected. Upstream recommends withholding file-creation permission from untrusted accounts and checking existing scopes for oversized .srt, .ass and .ssa files, running File Browser with a memory limit and automatic restart, and rate-limiting GET /api/subtitle/ per account at the reverse proxy. Not fixed upstream: 2.63.23 is the final File Browser release, and no later release will be published. References: https://nvd.nist.gov/vuln/detail/CVE-2026-90928 and https://github.com/filebrowser/filebrowser/security/advisories/GHSA-448h-jr2h-3vhp
Status
Impact
Waiting on upstream to publish a fixed version for this vulnerability.
Status