MEDIUMGo
GHSA-gcqf-pxgg-gw8q· CVE-2025-53363, GO-2025-3909Dpanel has an arbitrary file read vulnerability
Modified: 8/29/2025
package
Go/github.com/donknap/dpanel
pkg:go/github.com/donknap/dpanel
CRITICAL9.8Go
GHSA-j752-cjcj-w847· CVE-2025-30206, GO-2025-3612Dpanel's hard-coded JWT secret leads to remote code execution
Modified: 4/23/2025
HIGH8.1Go
GHSA-vh2x-fw87-4fxq· CVE-2025-66292, GO-2026-4318DPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface
Modified: 2/3/2026
—Go
GO-2025-3612· CVE-2025-30206, GHSA-j752-cjcj-w847Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel
Modified: 3/3/2026
—Go
GO-2025-3909· CVE-2025-53363, GHSA-gcqf-pxgg-gw8qDpanel has an arbitrary file read vulnerability in github.com/donknap/dpanel
Modified: 3/3/2026
—Go
GO-2026-4318· CVE-2025-66292, GHSA-vh2x-fw87-4fxqDPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface in github.com/donknap/dpanel
Modified: 3/3/2026