Packagist pterodactyl/panel
productUSpkg:composer/pterodactyl/panel
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
unpatched
0
critical
by severity
0critical2high7medium0low
updated 2026-10-28
01
vulnerabilities (14)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-49132US | — | Exploit |
| CVE-2021-41129US | medium6.8 | — |
| CVE-2019-1020002US | high7.5 | — |
| CVE-2026-54593US | — | — |
| CVE-2021-41176US | medium4.3 | — |
| CVE-2026-61609US | — | — |
| CVE-2024-34067US | medium6.1 | — |
| CVE-2021-41273US | medium4.3 | — |
| CVE-2026-26016US | high8.1 | — |
| CVE-2025-69197US | medium6.5OT elevated | — |
| CVE-2025-69198US | medium6.5 | — |
| CVE-2025-68954US | medium5.4 | — |
| CVE-2026-35202US | — | — |
| CVE-2024-49762US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-287Improper Authentication2 CVEs
- CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
- CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
- CWE-1259Improper Restriction of Security Token Assignment1 CVEs
- CWE-1270Generation of Incorrect Security Tokens1 CVEs
- CWE-203Observable Discrepancy1 CVEs
- CWE-283Unverified Ownership1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USOSV.dev14 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan