1.7 KiB
Security Policy
Warning
File Browser is being archived on 2026-09-01. Security reports are not accepted after that date, and no further security fixes will be released. The known unfixed issues, and hardening guidance for anyone who keeps running File Browser, are listed under Security in the README.
Supported Versions
| Version | Supported |
|---|---|
| 2.x | ✅ until 2026-09-01 |
| < 2.0 | ❌ |
Before Reporting
This project is in maintenance-only mode and is being wound down. To avoid duplicates, first check the existing advisories and open issues, and confirm:
- It concerns this project, not a fork. Reports about code, features, or endpoints that don't exist here belong to the relevant fork.
- It isn't an already-known class that remains unaddressed. Those are listed under Security in the README; reports covering them are likely to be closed as duplicates.
Reporting a Vulnerability
Until 2026-09-01:
- Critical: report privately via the Security page.
- Non-critical: open a public issue so the community can help; we'll label it as a security issue.
Please include, where possible:
- The commit the issue was found at
- A plaintext proof of concept (no binaries)
- Steps to reproduce
- Recommended remediation, if any
We're a volunteer effort, so responses can take a while, and we may reach out for clarification. A report being accepted does not guarantee a fix will ship before the archive date.
After 2026-09-01 this repository is read-only and reports can no longer be submitted or acted on.