—
GO-2026-4329
Pterodactyl endlessly reprocesses/reuploads activity log data due to SQLite max parameters limit not being considered in github.com/pterodactyl/wings
Quick fix
GO-2026-4329 — github.com/pterodactyl/wings: upgrade to the fixed version with the command below.
go get github.com/pterodactyl/wings@v1.12.0Details
Pterodactyl endlessly reprocesses/reuploads activity log data due to SQLite max parameters limit not being considered in github.com/pterodactyl/wings
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/pterodactyl/wings
Introduced in:
1.7.0Fixed in: 1.12.0Fix
go get github.com/pterodactyl/wings@v1.12.0References
- https://github.com/pterodactyl/wings/security/advisories/GHSA-2497-gp99-2m74[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-21696[ADVISORY]
- https://github.com/pterodactyl/panel/commit/09caa0d4995bd924b53b9a9e9b4883ac27bd5607[WEB]
- https://github.com/pterodactyl/panel/releases/tag/v1.12.0[WEB]
- https://github.com/pterodactyl/wings/blob/9ffbcdcdb1163da823cf9959b9602df9f7dcb54a/internal/cron/activity_cron.go#L81[WEB]
- https://github.com/pterodactyl/wings/blob/9ffbcdcdb1163da823cf9959b9602df9f7dcb54a/internal/cron/sftp_cron.go#L86[WEB]