Shaneisrael Fireshare
6 CVEs affecting Shaneisrael Fireshare. Latest disclosed: 2026-09-15. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-54337 | Critical | 9.8 | 2026-09-15 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated at… |
CVE-2025-67728 | Critical | 9.8 | 2025-12-12 | Fireshare facilitates self-hosted media and link sharing. Versions 1.2.30 and below allow an authenticated user, or unauthenticated user if the Public Uploads… |
CVE-2026-34745 | Critical | 9.1 | 2026-04-02 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.5.3, the fix for CVE-2026-33645 was applied to the authenticated /api/uploadChunke… |
CVE-2026-54544 | High | 7.2 | 2026-09-15 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @login… |
CVE-2026-33645 | High | 7.1 | 2026-03-26 | Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path traversal vulnerability in Fireshare’s chunked upload endpoin… |
CVE-2025-55476 | Medium | 6.5 | 2025-09-02 | FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint: GET /api/videos/public?sort= This par… |