sigma_file_manager vulnerabilities

CVEs whose affected-version data names the sigma_file_manager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111936Medium· 4.3

today

Sigma File Manager through 2.2.0 SSRF via Extension Download Commands

Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry…

▾ Sunlitaleksey-hoffman · Sigma File Managervia CVEORG