VDB
Sign up
—

GO-2025-3612

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

Quick fix

GO-2025-3612 — github.com/donknap/dpanel: upgrade to the fixed version with the command below.

go get github.com/donknap/dpanel@v1.6.1

Details

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/donknap/dpanel
Introduced in: 0Fixed in: 1.6.1
Fixgo get github.com/donknap/dpanel@v1.6.1

References