Skip to content
OpenAdvisories

Vendor

pelican

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8

    Pelican Panel before 1.0.0-beta35 Authorization Bypass via Startup

    Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startup.read permission can craft Livewire state updates to invoke afterStateUpdated …