Package
filebrowser-compat
Component
filebrowser-compat
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
The upstream security advisory states that no fix will be released, so no fixed version is expected. Upstream recommends two mitigations: audit user scopes for symbolic links that resolve into rule-denied paths and remove or repoint them, and keep rule-denied data outside every user scope instead of relying on deny rules within a scope. Not fixed upstream: 2.63.23 is the final File Browser release, and no later release will be published. References: https://nvd.nist.gov/vuln/detail/CVE-2026-90930 and https://github.com/filebrowser/filebrowser/security/advisories/GHSA-7w29-q235-57m9
Status
Impact
Waiting on upstream to publish a fixed version for this vulnerability.
Status