- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 18 · 2 critical, 6 high, 9 medium, 1 low
- Registry
- pkg.go.dev
Advisories 18
- CVE-2025-34429High 7.0
1Panel CSRF Web Port Configuration Change
Affected: from 1.10.33, through 2.0.15; all versions.
- CVE-2025-34430Medium 5.1
1Panel CSRF Panel Name Modification
Affected: from 1.10.33, through 2.0.15; all versions.
- CVE-2025-34410High 7.0
1Panel CSRF in Change Username Functionality Allows Account Lockout
Affected: from 1.10.33, through 2.0.15; all versions.
- CVE-2025-66508Medium 6.5
1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers
Affected: fixed in 2.0.14+incompatible; fixed in 2.0.14.
- CVE-2025-66507High 7.5
1Panel – CAPTCHA Bypass via Client-Controlled Flag
Affected: fixed in 2.0.14+incompatible; fixed in 2.0.14.
- CVE-2024-39911Critical 10.0
1Panel SQL injection
Affected: fixed in 1.10.12-lts.
- CVE-2024-39907Critical 9.8
a sqlinjection in 1Panel
Affected: all versions; fixed in 1.10.12-tls.
- CVE-2024-34352Medium 6.5
Arbitrary file write vulnerability in 1Panel
Affected: fixed in 1.10.3-lts.
- CVE-2024-30257Low 3.9
1Panel's password verification is suspected to have a timing attack vulnerability
Affected: fixed in 1.10.3; all versions.
- CVE-2024-2352Medium 6.3
1Panel swap baseApi.UpdateDeviceSwap command injection
Affected: fixed in 1.10.1-lts.
- CVE-2024-27288Medium 6.3
1Panel open source panel project has an unauthorized vulnerability.
Affected: fixed in 1.10.1-lts.
- CVE-2024-24768Medium 6.5
1Panel set-cookie is missing the Secure keyword
Affected: fixed in 1.9.6.
- CVE-2023-39966High 7.5
1Panel arbitrary file write vulnerability exists in the background
Affected: from 1.4.3, fixed in 1.5.0; from 1.4.3, fixed in 1.5.0.
- CVE-2023-39965Medium 6.5
1Panel Unauthorized access in Backend
Affected: from 1.4.3, fixed in 1.5.0; from 1.4.3, fixed in 1.5.0.
- CVE-2023-39964High 7.5
1Panel O&M management panel has a background arbitrary file reading vulnerability
Affected: from 1.4.3, fixed in 1.5.0; from 1.4.3, fixed in 1.5.0.
Show all 18 advisoriesShow fewer advisories
- CVE-2023-37477High 7.2
Command injection in firewall ip functionality in 1Panel
Affected: fixed in 1.4.3.
- CVE-2023-36457Medium 6.3
1Panel vulnerable to command injection when adding container repositories
Affected: fixed in 1.3.6.
- CVE-2023-36458Medium 6.3
1Panel vulnerable to ommand injection when entering the container terminal
Affected: fixed in 1.3.6.