https://github.com/filebrowser/filebrowser
file-browser file-manager file-sharing go material-design self-hosted vue
Score: 27.198397342398806
Last synced: about 11 hours ago
JSON representation
Repository metadata:
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview and edit your files.
- Host: GitHub
- URL: https://github.com/filebrowser/filebrowser
- Owner: filebrowser
- License: apache-2.0
- Created: 2015-09-11T21:21:58.000Z (almost 11 years ago)
- Default Branch: master
- Last Pushed: 2026-07-31T10:06:58.000Z (25 days ago)
- Last Synced: 2026-08-23T20:54:32.696Z (1 day ago)
- Topics: file-browser, file-manager, file-sharing, go, material-design, self-hosted, vue
- Language: Go
- Homepage:
- Size: 23.2 MB
- Stars: 35,926
- Watchers: 330
- Forks: 4,019
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE-OF-CONDUCT.md
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md
Owner metadata:
- Name: File Browser
- Login: filebrowser
- Email:
- Kind: organization
- Description:
- Website: https://filebrowser.org
- Location: Earth
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/35781395?v=4
- Repositories: 5
- Last Synced at: 2023-03-02T12:10:31.357Z
- Profile URL: https://github.com/filebrowser
GitHub Events
Total
- Commit comment event: 7
- Create event: 169
- Delete event: 146
- Discussion event: 19
- Fork event: 615
- Issue comment event: 2127
- Issues event: 966
- Pull request event: 447
- Pull request review comment event: 75
- Pull request review event: 112
- Push event: 1382
- Release event: 35
- Watch event: 5213
- Total: 11313
Last Year
- Commit comment event: 2
- Create event: 84
- Delete event: 75
- Discussion event: 19
- Fork event: 125
- Issue comment event: 221
- Issues event: 282
- Pull request event: 169
- Pull request review comment event: 32
- Pull request review event: 46
- Push event: 940
- Release event: 12
- Watch event: 1287
- Total: 3294
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 1,156
Total pull requests: 519
Average time to close issues: 2 months
Average time to close pull requests: about 1 month
Total issue authors: 961
Total pull request authors: 193
Average comments per issue: 3.21
Average comments per pull request: 2.59
Merged pull request: 203
Bot issues: 1
Bot pull requests: 81
Past year issues: 56
Past year pull requests: 87
Past year average time to close issues: about 1 month
Past year average time to close pull requests: 23 days
Past year issue authors: 53
Past year pull request authors: 31
Past year average comments per issue: 2.91
Past year average comments per pull request: 0.89
Past year merged pull request: 31
Past year bot issues: 1
Past year bot pull requests: 23
Top Issue Authors
- baur (16)
- Llolya (13)
- alfonsop123 (9)
- hacdias (9)
- darkside5271 (9)
- fsyikcfjlrsvikv (7)
- StanislavJochman (6)
- jniggemann (4)
- kenrmayfield (4)
- vihatsoft (4)
- qwertysmosh (4)
- cclove845 (4)
- christiangomez92 (4)
- trmdi (3)
- superzjg (3)
Top Pull Request Authors
- dependabot[bot] (49)
- transifex-integration[bot] (23)
- niubility000 (21)
- FrancoKaddour (18)
- gdy666 (14)
- hacdias (13)
- Nerahikada (12)
- kloon15 (11)
- ShlomoCode (11)
- ArielLeyva (10)
- renovate[bot] (9)
- o1egl (9)
- jagadam97 (8)
- superafun (6)
- nguyentranchung (6)
Top Issue Labels
- Stale (566)
- bug (119)
- waiting: triage (44)
- triage (34)
- waiting: feedback (17)
- area: backend (9)
- area: frontend (9)
- bug 🐞 (6)
- frontend (6)
- needs feedback (5)
- backend (3)
- feature ☘ (2)
- priority: low (1)
- docker 🐬 (1)
- build 📦 (1)
- help wanted (1)
- duplicate 📜 (1)
- enhancement ⚙ (1)
- priority: high (1)
- frozen in time ❄ (1)
Top Pull Request Labels
- Stale (91)
- dependencies (49)
- javascript (28)
- go (21)
- wip (1)
Package metadata
- Total packages: 7
- Total downloads: unknown
- Total docker downloads: 18,058,882
- Total dependent packages: 11 (may contain duplicates)
- Total dependent repositories: 4 (may contain duplicates)
- Total versions: 341
- Total maintainers: 1
- Total advisories: 43
proxy.golang.org: github.com/filebrowser/filebrowser/v2
- Homepage: https://github.com/filebrowser/filebrowser
- Documentation: https://pkg.go.dev/github.com/filebrowser/filebrowser/v2#section-documentation
- Licenses: apache-2.0
- Latest release: v2.63.23 (published 28 days ago)
- Last Synced: 2026-08-23T09:02:58.658Z (2 days ago)
- Versions: 165
- Dependent Packages: 11
- Dependent Repositories: 3
- Docker Downloads: 18,058,859
-
Rankings:
- Forks count: 0.192%
- Stargazers count: 0.241%
- Docker downloads count: 0.368%
- Average: 1.069%
- Dependent packages count: 1.658%
- Dependent repos count: 2.885%
-
Advisories:
- File Browser: Colliding username normalization gives two users the same home directory
- File Browser: Share API exposes the password hash and bypass token
- File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)
- File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope
- File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup
- File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)
- File Browser: Authentication Bypass via Proxy Auth Header Forgery
- File Browser has a Command Execution Allowlist Bypass via Shell Metacharacter Injection
- File Browser has incorrect access control for public directory shares via rule path rebasing
- File Browser: FilePath traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames
- File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope
- File Browser has a DoS Vulnerability via Public Login API
- File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path
- File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix
- File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands
- File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check
- File Browser share links remain accessible after Share/Download permissions are revoked
- File Browser has an access rule bypass via HasPrefix without trailing separator in path matching
- File Browser has a Command Injection via Hook Runner
- File Browser vulnerable to Stored Cross-site Scripting via text/template branding injection
- File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution
- File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file
- File Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter
- File Browser Signup Grants Admin When Default Permissions Include Admin
- File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely
- File Browser's TUS Delete Endpoint Bypasses Delete Permission Check
- FileBrowser has Path Traversal in Public Share Links that Exposes Files Outside Shared Directory
- File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL
- File Browser has an Authentication Bypass in User Password Update
- File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login
- File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency
- File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function
- File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing
- File Browser vulnerable to insecure password handling
- File Browser vulnerable to command execution allowlist bypass
- File Browser: Command Execution not Limited to Scope
- File Browser allows sensitive data to be transferred in URL
- filebrowser Allows Shell Commands to Spawn Other Commands
- filebrowser allows Stored Cross-Site Scripting through the Markdown preview function
- filebrowser Sets Insecure File Permissions
- Cross-Site Request Forgery in Filebrowser
proxy.golang.org: github.com/filebrowser/filebrowser
- Homepage: https://github.com/filebrowser/filebrowser
- Documentation: https://pkg.go.dev/github.com/filebrowser/filebrowser#section-documentation
- Licenses: apache-2.0
- Latest release: v1.11.0 (published over 7 years ago)
- Last Synced: 2026-08-23T10:00:14.946Z (2 days ago)
- Versions: 47
- Dependent Packages: 0
- Dependent Repositories: 1
- Docker Downloads: 23
-
Rankings:
- Forks count: 0.192%
- Stargazers count: 0.242%
- Average: 3.676%
- Dependent repos count: 4.719%
- Dependent packages count: 9.553%
-
Advisories:
- File Browser: FilePath traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames
- File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope
- File Browser has a DoS Vulnerability via Public Login API
- File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path
- File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix
- File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login
- File Browser’s insecure JWT handling can lead to session replay attacks after logout
- File Browser vulnerable to insecure password handling
- File Browser's password protection of links is bypassable
- File Browser vulnerable to command execution allowlist bypass
- File Browser allows sensitive data to be transferred in URL
- filebrowser allows Stored Cross-Site Scripting through the Markdown preview function
- filebrowser Sets Insecure File Permissions
alpine-edge: filebrowser
Web File Browser
- Homepage: https://github.com/filebrowser/filebrowser
- Licenses: Apache-2.0
- Latest release: 2.27.0-r9 (published over 1 year ago)
- Last Synced: 2026-06-20T16:02:13.062Z (2 months ago)
- Versions: 32
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Forks count: 0.791%
- Stargazers count: 0.802%
- Average: 4.058%
- Dependent packages count: 14.641%
- Maintainers (1)
alpine-edge: filebrowser-openrc
Web File Browser (OpenRC init scripts)
- Homepage: https://github.com/filebrowser/filebrowser
- Licenses: Apache-2.0
- Latest release: 2.27.0-r9 (published over 1 year ago)
- Last Synced: 2026-06-20T16:02:22.932Z (2 months ago)
- Versions: 27
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Average: 6.289%
- Dependent packages count: 12.577%
- Maintainers (1)
proxy.golang.org: github.com/filebrowser/Filebrowser
Package filebrowser provides a web interface to access your files wherever you are.
- Homepage: https://github.com/filebrowser/Filebrowser
- Documentation: https://pkg.go.dev/github.com/filebrowser/Filebrowser#section-documentation
- Licenses: apache-2.0
- Latest release: v1.11.0 (published over 7 years ago)
- Last Synced: 2026-08-23T18:59:25.549Z (1 day ago)
- Versions: 47
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 8.564%
- Average: 9.111%
- Dependent repos count: 9.658%
artifacthub.io: utkuozdemir/filebrowser
A Helm chart for the File Browser project
- Homepage: https://filebrowser.org
- Documentation: https://artifacthub.io/packages/helm/utkuozdemir/filebrowser
- Licenses: MIT
- Latest release: 1.0.0 (published almost 4 years ago)
- Last Synced: 2026-08-23T18:59:25.948Z (1 day ago)
- Versions: 14
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 0 Total
-
Rankings:
- Downloads: 0.0%
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
artifacthub.io: geek-cookbook/filebrowser
filebrowser provides a file managing interface within a specified directory
- Homepage: https://github.com/k8s-at-home/charts/tree/master/charts/incubator/filebrowser
- Documentation: https://artifacthub.io/packages/helm/geek-cookbook/filebrowser
- Licenses: Unknown
- Latest release: 1.4.2 (published about 4 years ago)
- Last Synced: 2026-08-23T18:59:26.820Z (1 day ago)
- Versions: 9
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 0 Total
-
Rankings:
- Downloads: 0.0%
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Dependencies
Dockerfile
docker
- alpine latest build
go.mod
go
- github.com/andybalholm/brotli v1.0.1
- github.com/asdine/storm/v3 v3.2.1
- github.com/davecgh/go-spew v1.1.1
- github.com/disintegration/imaging v1.6.2
- github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5
- github.com/dsoprea/go-exif/v3 v3.0.0-20201216222538-db167117f483
- github.com/dsoprea/go-logging v0.0.0-20200517223158-a10564966e9d
- github.com/dsoprea/go-utility/v2 v2.0.0-20200717064901-2fccff4aa15e
- github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568
- github.com/fsnotify/fsnotify v1.6.0
- github.com/go-errors/errors v1.1.1
- github.com/go-ole/go-ole v1.2.6
- github.com/golang-jwt/jwt/v4 v4.4.3
- github.com/golang/geo v0.0.0-20200319012246-673a6f80352d
- github.com/golang/snappy v0.0.2
- github.com/gorilla/mux v1.8.0
- github.com/gorilla/websocket v1.5.0
- github.com/hashicorp/hcl v1.0.0
- github.com/inconshreveable/mousetrap v1.0.1
- github.com/klauspost/compress v1.11.4
- github.com/klauspost/pgzip v1.2.5
- github.com/magiconair/properties v1.8.7
- github.com/maruel/natural v1.1.0
- github.com/marusama/semaphore/v2 v2.5.0
- github.com/mholt/archiver/v3 v3.5.1
- github.com/mitchellh/go-homedir v1.1.0
- github.com/mitchellh/mapstructure v1.5.0
- github.com/nwaples/rardecode v1.1.0
- github.com/pelletier/go-toml/v2 v2.0.6
- github.com/pierrec/lz4/v4 v4.1.2
- github.com/pmezard/go-difflib v1.0.0
- github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c
- github.com/shirou/gopsutil/v3 v3.23.1
- github.com/spf13/afero v1.9.3
- github.com/spf13/cast v1.5.0
- github.com/spf13/cobra v1.6.1
- github.com/spf13/jwalterweatherman v1.1.0
- github.com/spf13/pflag v1.0.5
- github.com/spf13/viper v1.15.0
- github.com/stretchr/testify v1.8.1
- github.com/subosito/gotenv v1.4.2
- github.com/tomasen/realip v0.0.0-20180522021738-f0c99a92ddce
- github.com/ulikunitz/xz v0.5.9
- github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8
- github.com/yusufpapurcu/wmi v1.2.2
- go.etcd.io/bbolt v1.3.7
- golang.org/x/crypto v0.6.0
- golang.org/x/image v0.5.0
- golang.org/x/net v0.6.0
- golang.org/x/sys v0.5.0
- golang.org/x/text v0.7.0
- gopkg.in/ini.v1 v1.67.0
- gopkg.in/natefinch/lumberjack.v2 v2.2.1
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v3 v3.0.1
go.sum
go
- 541 dependencies
frontend/package.json
npm
- @vue/cli-plugin-babel ^4.1.2 development
- @vue/cli-plugin-eslint ~4.5.0 development
- @vue/cli-service ^4.1.2 development
- @vue/eslint-config-prettier ^6.0.0 development
- babel-eslint ^10.1.0 development
- compression-webpack-plugin ^6.0.3 development
- eslint ^6.7.2 development
- eslint-plugin-prettier ^3.3.1 development
- eslint-plugin-vue ^6.2.2 development
- prettier ^2.2.1 development
- vue-template-compiler ^2.6.10 development
- ace-builds ^1.4.7
- clipboard ^2.0.4
- core-js ^3.9.1
- css-vars-ponyfill ^2.4.3
- js-base64 ^2.5.1
- lodash.clonedeep ^4.5.0
- lodash.throttle ^4.1.1
- material-icons ^1.10.5
- moment ^2.29.4
- normalize.css ^8.0.1
- noty ^3.2.0-beta
- pretty-bytes ^6.0.0
- qrcode.vue ^1.7.0
- utif ^3.1.0
- vue ^2.6.10
- vue-async-computed ^3.9.0
- vue-i18n ^8.15.3
- vue-lazyload ^1.3.3
- vue-router ^3.1.3
- vue-simple-progress ^1.1.1
- vuex ^3.1.2
- vuex-router-sync ^5.0.0
- whatwg-fetch ^3.6.2
frontend/pnpm-lock.yaml
npm
- 619 dependencies
.github/workflows/ci.yaml
actions
- actions/checkout v6 composite
- actions/setup-go v6 composite
- actions/setup-node v6 composite
- docker/login-action v4 composite
- docker/setup-buildx-action v4 composite
- docker/setup-qemu-action v4 composite
- go-task/setup-task v2 composite
- golangci/golangci-lint-action v9 composite
- goreleaser/goreleaser-action v7 composite
- pnpm/action-setup v6 composite
.github/workflows/lint-pr.yaml
actions
- amannn/action-semantic-pull-request v6 composite
- marocchino/sticky-pull-request-comment v3 composite