Affected by GO-2025-3767 and 1 other vulnerabilities

GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

GO-2025-4149: OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

filebrowser

package

v0.2.0 Latest Latest Go to latest Published: Apr 23, 2025 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/google/osv-scalibr

Links

Documentation ¶

Overview ¶

Package filebrowser implements a detector for weak/guessable passwords on a filebrowser instance. To test and install filebrowser, simply follow the instructions in https://filebrowser.org/installation

Constants ¶

View Source

const (
	// Name of the detector.
	Name = "weakcredentials/filebrowser"
)

Variables ¶

This section is empty.

Functions ¶

func New ¶ added in v0.1.7

func New() detector.Detector

New returns a detector.

Types ¶

type Detector ¶

type Detector struct{}

Detector is a SCALIBR Detector for weak/guessable passwords from /etc/shadow.

func (Detector) Name ¶

func (Detector) Name() string

Name of the detector.

func (Detector) RequiredExtractors ¶

func (Detector) RequiredExtractors() []string

RequiredExtractors returns an empty list as there are no dependencies.

func (Detector) Requirements ¶

func (Detector) Requirements() *plugin.Capabilities

Requirements of the detector.

func (Detector) Scan ¶

func (d Detector) Scan(ctx context.Context, scanRoot *scalibrfs.ScanRoot, px *packageindex.PackageIndex) ([]*detector.Finding, error)

Scan starts the scan.

func (Detector) Version ¶

func (Detector) Version() int

Version of the detector.

Source Files ¶

View all Source files

filebrowser.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL