MEDIUM6.3Go
GHSA-26w3-q4j8-4xjp· CVE-2024-27288, GO-2024-26131Panel open source panel project has an unauthorized vulnerability.
Modified: 9/10/2026
package
Go/github.com/1Panel-dev/1Panel
pkg:go/github.com/1Panel-dev/1Panel
CRITICAL9.8Go
GHSA-5grx-v727-qmq6· CVE-2024-39907, GO-2024-29901Panel has an SQL injection issue related to the orderBy clause
Modified: 9/10/2026
MEDIUM4.3Go
GHSA-5xpq-2vmc-5cqp· CVE-2025-34430, GO-2025-42301Panel contains a cross-site request forgery (CSRF) vulnerability in the panel name management functionality
Modified: 12/23/2025
MEDIUM5.9Go
GHSA-6m9h-2pr2-9j8f· CVE-2024-30257, GO-2024-27341Panel's password verification is suspected to have a timing attack vulnerability
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-7cqv-qcq2-r765· CVE-2025-66508, GO-2025-42071Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers
Modified: 12/17/2025
MEDIUM6.3Go
GHSA-7x2c-fgx6-xf9h· CVE-2023-36458, GO-2023-18881Panel vulnerable to command injection when entering the container terminal
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-85cf-gj29-f555· CVE-2023-39965, GO-2023-20051Panel Arbitrary File Download vulnerability
Modified: 9/10/2026
LOW3.5Go
GHSA-9xfw-jjq2-7v8h· CVE-2024-24768, GO-2024-25311Panel set-cookie is missing the Secure keyword
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-f8ch-w75v-c847· CVE-2024-34352, GO-2024-28301Panel arbitrary file write vulnerability
Modified: 6/8/2026
HIGH7.5Go
GHSA-hf7j-xj3w-87g4· CVE-2023-39966, GO-2023-20061Panel arbitrary file write vulnerability
Modified: 8/21/2024
HIGH8.8Go
GHSA-p9xf-74xh-mhw5· CVE-2023-37477, GO-2023-19401Panel command injection vulnerability in Firewall ip functionality
Modified: 9/10/2026
HIGH7.5Go
GHSA-pv7q-v9mv-9mh5· CVE-2023-39964, GO-2023-20041Panel O&M management panel has a background arbitrary file reading vulnerability
Modified: 9/10/2026
MEDIUM6.3Go
GHSA-q2mx-gpjf-3h8x· CVE-2023-36457, GO-2023-18871Panel vulnerable to command injection when adding container repositories
Modified: 9/10/2026
HIGH7.5Go
GHSA-qmg5-v42x-qqhq· CVE-2025-66507, GO-2025-42091Panel – CAPTCHA Bypass via Client-Controlled Flag
Modified: 12/15/2025
HIGH7.1Go
GHSA-rpr2-4hqj-hc4q· CVE-2025-34410, GO-2025-42291Panel contains a cross-site request forgery (CSRF) vulnerability in the Change Username functionality
Modified: 12/23/2025
HIGH7.1Go
GHSA-wrvc-x3wf-j5f5· CVE-2025-34429, GO-2025-42311Panel contains a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality
Modified: 12/23/2025
MEDIUM6.3Go
GHSA-x2vg-5wrf-vj6v· CVE-2024-2352, GO-2024-26361Panel is vulnerable to command injection
Modified: 6/4/2024
—Go
GO-2023-1887· CVE-2023-36457, GHSA-q2mx-gpjf-3h8x1Panel vulnerable to command injection when adding container repositories in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2023-1888· CVE-2023-36458, GHSA-7x2c-fgx6-xf9h1Panel vulnerable to command injection when entering the container terminal in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2023-1940· CVE-2023-37477, GHSA-p9xf-74xh-mhw51Panel command injection vulnerability in Firewall ip functionality in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2023-2004· CVE-2023-39964, GHSA-pv7q-v9mv-9mh51Panel O&M management panel has a background arbitrary file reading vulnerability in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2023-2005· CVE-2023-39965, GHSA-85cf-gj29-f5551Panel Arbitrary File Download vulnerability in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2023-2006· CVE-2023-39966, GHSA-hf7j-xj3w-87g41Panel arbitrary file write vulnerability in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2024-2531· CVE-2024-24768, GHSA-9xfw-jjq2-7v8h1Panel set-cookie is missing the Secure keyword in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2024-2613· CVE-2024-27288, GHSA-26w3-q4j8-4xjpUnauthorized Console access in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2024-2636· CVE-2024-2352, GHSA-x2vg-5wrf-vj6v1Panel is vulnerable to command injection in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2024-2734· CVE-2024-30257, GHSA-6m9h-2pr2-9j8f1Panel's password verification is suspected to have a timing attack vulnerability in github.com/1Panel-dev/1Panel
Modified: 7/9/2024
—Go
GO-2024-2830· CVE-2024-34352, GHSA-f8ch-w75v-c847Arbitrary file write in github.com/1Panel-dev/1Panel
Modified: 5/20/2024
—Go
GO-2024-2990· CVE-2024-39907, GHSA-5grx-v727-qmq61Panel has an SQL injection issue related to the orderBy clause in github.com/1Panel-dev/1Panel
Modified: 7/22/2024
—Go
GO-2024-2992· CVE-2024-39911, GHSA-7m53-pwp6-v3f51Panel SQL injection in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2025-4207· CVE-2025-66508, GHSA-7cqv-qcq2-r7651Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2025-4209· CVE-2025-66507, GHSA-qmg5-v42x-qqhq1Panel – CAPTCHA Bypass via Client-Controlled Flag in github.com/1Panel-dev/1Panel
Modified: 3/3/2026
—Go
GO-2025-4229· CVE-2025-34410, GHSA-rpr2-4hqj-hc4q1Panel contains a cross-site request forgery (CSRF) vulnerability in the Change Username functionality in github.com/1Panel-dev/1Panel
Modified: 12/15/2025
—Go
GO-2025-4230· CVE-2025-34430, GHSA-5xpq-2vmc-5cqp1Panel contains a cross-site request forgery (CSRF) vulnerability in the panel name management functionality in github.com/1Panel-dev/1Panel
Modified: 12/15/2025
—Go
GO-2025-4231· CVE-2025-34429, GHSA-wrvc-x3wf-j5f51Panel contains a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality in github.com/1Panel-dev/1Panel
Modified: 12/15/2025