Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/1Panel-dev/1Panel
Go
· Package
18 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
1Panel has an SQL injection issue related to the orderBy clause
CVE-2024-39907 · GHSA-5GRX-V727-QMQ6
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Critical
Fix reported
2026-09-10
1Panel's password verification is suspected to have a timing attack vulnerability
CVE-2024-30257 · GHSA-6M9H-2PR2-9J8F
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Low
Fix reported
2026-09-10
1Panel set-cookie is missing the Secure keyword
CVE-2024-24768 · GHSA-9XFW-JJQ2-7V8H
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Low
Fix reported
2026-09-10
1Panel O&M management panel has a background arbitrary file reading vulnerability
CVE-2023-39964 · GHSA-PV7Q-V9MV-9MH5
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
High
Fix reported
2026-09-10
1Panel vulnerable to command injection when adding container repositories
CVE-2023-36457 · GHSA-Q2MX-GPJF-3H8X
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Medium
Fix reported
2026-09-10
1Panel command injection vulnerability in Firewall ip functionality
CVE-2023-37477 · GHSA-P9XF-74XH-MHW5
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
High
Fix reported
2026-09-10
1Panel open source panel project has an unauthorized vulnerability.
CVE-2024-27288 · GHSA-26W3-Q4J8-4XJP
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Medium
Fix reported
2026-09-10
1Panel Arbitrary File Download vulnerability
CVE-2023-39965 · GHSA-85CF-GJ29-F555
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Medium
Fix reported
2026-09-10
1Panel vulnerable to command injection when entering the container terminal
CVE-2023-36458 · GHSA-7X2C-FGX6-XF9H
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Medium
Fix reported
2026-09-10
1Panel arbitrary file write vulnerability
CVE-2024-34352 · GHSA-F8CH-W75V-C847
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Medium
Fix reported
2026-06-08
1Panel – CAPTCHA Bypass via Client-Controlled Flag
CVE-2025-66507 · GHSA-QMG5-V42X-QQHQ
Version ranges need review.
github.com/1Panel-dev/1Panel/core
github.com/1Panel-dev/1Panel
Go
High
Fix reported
2026-03-03
1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers
CVE-2025-66508 · GHSA-7CQV-QCQ2-R765
Version ranges need review.
github.com/1Panel-dev/1Panel/agent
github.com/1Panel-dev/1Panel
Go
Medium
Fix reported
2026-03-03
1Panel SQL injection in github.com/1Panel-dev/1Panel
CVE-2024-39911 · GHSA-7M53-PWP6-V3F5
github.com/1Panel-dev/1Panel
Go
Unknown
Fix reported
2026-03-03
1Panel is vulnerable to command injection
CVE-2024-2352 · GHSA-X2VG-5WRF-VJ6V
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Medium
Fix reported
2026-03-03
1Panel arbitrary file write vulnerability
CVE-2023-39966 · GHSA-HF7J-XJ3W-87G4
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
High
Fix reported
2026-03-03
1Panel contains a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality
CVE-2025-34429 · GHSA-WRVC-X3WF-J5F5
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
High
No fix reported
2025-12-23
1Panel contains a cross-site request forgery (CSRF) vulnerability in the Change Username functionality
CVE-2025-34410 · GHSA-RPR2-4HQJ-HC4Q
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
High
No fix reported
2025-12-23
1Panel contains a cross-site request forgery (CSRF) vulnerability in the panel name management functionality
CVE-2025-34430 · GHSA-5XPQ-2VMC-5CQP
Version ranges need review.
github.com/1Panel-dev/1Panel
Go
Medium
No fix reported
2025-12-23