Skip to content
OpenAdvisories

Package · Go

github.com/donknap/dpanel

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.1
    CVE-2025-66292

    DPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface

    DPanel is an open source server management panel written in Go. Prior to 1.9.2, DPanel has an arbitrary file deletion vulnerability in the /api/common/attach/delete interface. Authenticated users can delete arbitrary files on the server via path traversal. Wh…

    donknap dpanel github.com/donknap/dpanel Go
  • Medium 4.8
    CVE-2025-53363

    Dpanel has an arbitrary file read vulnerability

    dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authenticated users to read arbitrary files from the server via the /api/app/compose/get-from-uri API endpoint. The vulnerability exists in the GetF…

    donknap dpanel github.com/donknap/dpanel Go
  • Critical 9.8
    CVE-2025-30206

    Dpanel's hard-coded JWT secret leads to remote code execution

    Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine…

    donknap dpanel github.com/donknap/dpanel Go