Skip to content
OpenAdvisories

Package · Packagist

pterodactyl/panel

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-35202

    Pterodactyl has a database resource limit bypass via race condition in Client API

    Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism us…

    pterodactyl panel pterodactyl/panel Packagist
  • Low —
    GHSA-mgr9-6c2j-jxrq

    Pterodactyl has a Reflected XSS vulnerability in “Create New Database Host”

    > [!NOTE] > Message from the Pterodactyl team: > > The Pterodactyl team has evaluated this as a minor security issue but does not consider it something that should be assigned a CVE, nor does it require active patching by vulnerable systems. > > This issue is…

    pterodactyl/panel Packagist