Go github.com/1Panel-dev/1Panel/core

Name: Go github.com/1Panel-dev/1Panel/core
Brand: Go

productUS

pkg:golang/github.com/1Panel-dev/1Panel/core

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

1critical0high0medium0low

updated 2026-10-28

vulnerabilities (2)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-54424US	critical9.8	1.01% (63rd)	Exploit	2.0.6	2025-08-01	3 versions
CVE-2025-66507US	—	0.47% (40th)	—	0.0.0-20251128030527-ac43f00273be	2025-12-09	< 0.0.0-20251128030527-ac43f00273be

The flaw types (CWEs) most of these CVEs share.

CWE-290Authentication Bypass by Spoofing1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-602Client-Side Enforcement of Server-Side Security1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-807Reliance on Untrusted Inputs in a Security Decision1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.